# PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target **URL:** \ **Category:** Graylog Central (peer support)\ **Created:** [May 19, 2023, 11:58am UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851 "2023-05-19T11:58:38Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![milos](https://avatars.discourse-cdn.com/v4/letter/m/6bbea6/32.png) [@milos](https://community.graylog.org/u/milos)\ **Post date:** [May 19, 2023, 11:58am UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851/1 "2023-05-19T11:58:38Z")
Hello, after SSL setup on our Graylog server, I can login into Graylog and the browser is satisfied with the certificate. Right after login into Graylog via SSL, the following errors start to apear in /var/log/graylog/server.log: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target After logout, the error messages stop filling the logfile. Also: I can define an input (Syslog UDP) in the menu System \> Inputs, but I can’t start it. There are no errors and the input starts fine if TLS is disabled in server.conf - OS Information: AlmaLinux release 8.7 (Stone Smilodon) - Package Version: 5.0.6 - Service logs, configurations, and environment variables: 2023-05-19T13:41:11.394+02:00 WARN [ProxiedResource] Unable to call [https://syslog2.izum.pri:9000/api/system/metrics/multiple](https://syslog2.izum.pri:9000/api/system/metrics/multiple) on node : PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target http\_enable\_tls = true http\_tls\_cert\_file = /etc/pki/tls/certs/graylog-certificate.pem http\_tls\_key\_file = /etc/pki/tls/private/graylog-key.pem http\_tls\_key\_password = XXXX I have checked similar posts in the community without success. Thanks for your suggestions, Miloš ---
**Author:** ![joe.gross](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/joe.gross/32/13372_2.png) [@joe.gross](https://community.graylog.org/u/joe.gross)\ **Post date:** [May 19, 2023, 10:26pm UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851/2 "2023-05-19T22:26:16Z")
You’re in luck. @drewmiranda-gl just published a blog that gives excellent step by step guidance on how to enable TLS with Graylog. I encourage you to review it and come back with any questions you may have. > **[How-To Guide: Securing Graylog with TLS](https://graylog.org/post/how-to-guide-securing-graylog-with-tls/?_gl=1*1jnabem*_ga*NDAzNzI5NzczLjE2NDE0MjA4MTY.*_ga_NCQ7VMMZNQ*MTY4NDUzNDYyMi4xNzkuMS4xNjg0NTM1MDYwLjAuMC4w)** > > Learn how to enhance the security of your Graylog log management system by implementing Transport Layer Security (TLS) encryption. Our blog provides step-by-step instructions and best practices for securing Graylog with TLS. ---
**Author:** ![gsmith](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/gsmith/32/1222_2.png) [@gsmith](https://community.graylog.org/u/gsmith)\ **Post date:** [May 20, 2023, 1:29am UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851/3 "2023-05-20T01:29:27Z")
I could of used that like 7 years ago 😆 ---
**Author:** ![milos](https://avatars.discourse-cdn.com/v4/letter/m/6bbea6/32.png) [@milos](https://community.graylog.org/u/milos)\ **Post date:** [May 22, 2023, 10:40am UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851/4 "2023-05-22T10:40:03Z")
Thanks for the guide. It helped. I suggest to integrate it in the installation manual, esecially the parts where the removal of text from the certificate and the import of public certs into Java Keystore are described. Regards, Miloš ---
**Author:** ![joe.gross](https://sea2.discourse-cdn.com/flex016/user_avatar/community.graylog.org/joe.gross/32/13372_2.png) [@joe.gross](https://community.graylog.org/u/joe.gross)\ **Post date:** [May 24, 2023, 9:53pm UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851/5 "2023-05-24T21:53:22Z")
Thanks @milos. It’s a good problem to have, but we are victims of our own success at the moment. Our docs team is working furiously to capture all the content that is being created throughout the company. These papers, videos, and such are meant to fill the gaps while they get caught up. I’m glad it helped. @drewmiranda-gl will be pleased to hear it as well. ---
**Author:** ![system](https://us1.discourse-cdn.com/flex016/uploads/graylog/original/3X/c/7/c7c09c6b5099570133d6502b83f50ba4430de5b6.png) [@system](https://community.graylog.org/u/system)\ **Post date:** [June 7, 2023, 9:53pm UTC](https://community.graylog.org/t/pkix-path-building-failed-sun-security-provider-certpath-suncertpathbuilderexception-unable-to-find-valid-certification-path-to-requested-target/28851/6 "2023-06-07T21:53:31Z")
Closed on June 7, 2023, 9:53pm UTC This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.