Skip to main content

Mail server configuration fails with a certificate error when using TLS

Symptom​

Connecting the iGrafx Platform to a mail server over TLS fails — for example, the test email from Admin → Email Management doesn't arrive — and the server logs contain an error like:

javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Cause​

The Java runtime the iGrafx Platform runs on doesn't trust the TLS certificate the SMTP server presents — typically because the certificate is self-signed or issued by an internal certificate authority whose certificate isn't in the Java trust keystore.

Resolution​

  1. Import the SMTP server's certificate — or its CA certificate — into the standard keystore (cacerts) of the Java SDK bundled with your iGrafx Platform installation. See Trust an external server's certificate.
  2. Restart the iGrafx Platform.
  3. Send a test email from Admin → Email Management to confirm the connection works — see Manage email.