从 Wildfly 访问密钥库时出现证书问题

如何解决从 Wildfly 访问密钥库时出现证书问题

在 docker 镜像 jboss/wildfly:21.0.0 上运行。最终此代码生成证书问题：

ClientSecretCredential clientSecretCredential = new ClientSecretCredentialBuilder()
                .clientId(System.getenv("AZURE_CLIENT_ID"))
                .clientSecret(System.getenv("AZURE_CLIENT_SECRET"))
                .tenantId(System.getenv("AZURE_TENANT_ID"))
                .build();

        // Azure SDK client builders accept the credential as a parameter
        SecretClient secretClient = new SecretClientBuilder()
                .vaultUrl("....")
                .credential(clientSecretCredential)
                .buildClient();

异常：

sun.security.validator.ValidatorException：PKIX 路径构建失败： sun.security.provider.certpath.SunCertPathBuilderException：无法找到到请求目标的有效认证路径

我已经从我使用的密钥库和 login.microsoftonline.com 使用以下导入了证书：

RUN echo -n | openssl s_client -connect [mykeyavult_host]:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > \
/opt/jboss/wildfly/standalone/configuration/kv.cert

RUN echo -n | openssl s_client -connect login.microsoftonline.com:443 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > \
/opt/jboss/wildfly/standalone/configuration/ms-login.cert

。 . .

#Add kv cert to keystore

RUN echo yes | keytool -importcert -alias lsl-kv -keystore /opt/jboss/wildfly/standalone/configuration/store.jks \
-storepass this_is_no_secret -file /opt/jboss/wildfly/standalone/configuration/kv.cert

#Add ms-login cert to keystore
RUN echo yes | keytool -importcert -alias ms-login -keystore /opt/jboss/wildfly/standalone/configuration/store.jks \
-storepass this_is_no_secret -file /opt/jboss/wildfly/standalone/configuration/ms-login.cert

在 docker 外运行 wildfly 我设法摆脱了证书问题。