http:send-request() call emits certificate error
Monday, 8 December 2025 · 4 messages · last reply 9 Dec 2025
YK
Yitzhak Khabinsky8 Dec 2025 16:48 #
Hello,
Using BaseX 12.0
All of a sudden I started to get the following error while calling
http:send-request(): [experr:HC0001] SSL: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
XQuery repro:let $uri := "https://giswspro.miamidade.gov/ArcGIS/rest/services/MDPD_Locators/MDPDGeoAddressl/GeocodeServer/findAddressCandidates"
return http:send-request(<http:request method='GET' status-only='true' json='format=xquery,lax=true'/>, $uri)By the way, the same error shows up for any URIs.
The following SSL validator shows no issues with the certificates, or their chains: https://decoder.link/sslchecker
https://decoder.link/sslchecker/giswspro.miamidade.gov/443
Also, the $uri is public, so it is testable on your side.
Regards,
Yitzhak Khabinsky
YK
Yitzhak Khabinsky9 Dec 2025 14:09 #
My computers have Windows 11 OS.
I am in the corporate environment with multiple firewalls, and other security restrictions.
What is strange, from some computers the same call of the Web Service is working in BaseX!
In the original question, the $uri string was cut off.
Here is the correct $uri:
let $uri := `https://giswspro.miamidade.gov/ArcGIS/rest/services/MDPD_Locators/MDPDGeoAddressl/GeocodeServer/findAddressCandidates`
return http:send-request(<http:request method='GET' status-only='true' json='format=xquery,lax=true'/>, $uri)Regards,
Yitzhak Khabinsky
YK
Yitzhak Khabinsky9 Dec 2025 14:18 #
I forgot to mention that the same call is working in the SoapUI 5.9.1 on the problematic machines.
Regards,
Yitzhak Khabinsky
YK
Yitzhak Khabinsky9 Dec 2025 14:48 #
Finally, some good news on my end.
I upgraded Java from:
java.vm.vendor: Eclipse Adoptium
java.vm.version: 17.0.8.1+1
to the following:
java.vm.vendor: Eclipse Adoptium
java.vm.version: 21.0.9+10-LTS
and the
http:send-request() calls started to work like before.
Regards,
Yitzhak KhabinskyWritten for BaseX 12.0. BaseX may have changed since: please check the current documentation.
⚡Generated with XQuery