{"id":14977,"date":"2018-04-10T10:38:42","date_gmt":"2018-04-10T17:38:42","guid":{"rendered":"https:\/\/ephesoft.com\/docs\/?p=14977"},"modified":"2020-08-26T16:14:47","modified_gmt":"2020-08-26T23:14:47","slug":"kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty","status":"publish","type":"post","link":"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/","title":{"rendered":"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty"},"content":{"rendered":"

Issue Description:<\/strong><\/p>\n

If you are observing below Error message when Ephesoft is configured over https in tomcat and truststore & keystore are referencing to same jks file which doesn’t contain any CA Certificate .<\/p>\n

2018-04-03 14:26:23,092 [main] ERROR org.apache.coyote.http11.Http11NioProtocol- Failed to initialize end point associated with ProtocolHandler [“https-jsse-nio-443”]
\n\u00a0Caused by: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty<\/strong><\/em>
\nat java.security.cert.PKIXParameters.setTrustAnchors(PKIXParameters.java:200) ~[?:1.8.0_144]
\nat java.security.cert.PKIXParameters.<init>(PKIXParameters.java:157) ~[?:1.8.0_144]
\nat java.security.cert.PKIXBuilderParameters.<init>(PKIXBuilderParameters.java:130) ~[?:1.8.0_144]
\nat org.apache.tomcat.util.net.jsse.JSSEUtil.getParameters(JSSEUtil.java:368) ~[tomcat-coyote.jar:8.5.23]
\nat org.apache.tomcat.util.net.jsse.JSSEUtil.getTrustManagers(JSSEUtil.java:292) ~[tomcat-coyote.jar:8.5.23]
\nat org.apache.tomcat.util.net.AbstractJsseEndpoint.createSSLContext(AbstractJsseEndpoint.java:113) ~[tomcat-coyote.jar:8.5.23]
\n… 20 more<\/p>\n

Component:<\/strong><\/p>\n

Tomcat<\/p>\n

 <\/p>\n

Ephesoft Version:<\/strong><\/p>\n

Ephesoft 4.5.0.0<\/p>\n

 <\/p>\n

Solution<\/strong>:<\/p>\n

If we use same .jks file as a keystore and as a truststore, then the server start up is failing with following error : java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty.
\nKeystore is to store the ServerCerts and TrustStore is to store the CA certs. On adding at least one CA certificate in the .jks, above issue will be resolved.<\/p>\n

Also if you are not using PIV\/CAC, so you are not required to set truststoreFile option in connector settings.
\nAlso, the change in behaviour b\/w 4120\/4130 and 4500 is because of Tomcat version upgrade.<\/p>\n","protected":false},"excerpt":{"rendered":"

Issue Description: If you are observing below Error message when Ephesoft is configured over https in tomcat and truststore & […]<\/p>\n","protected":false},"author":11,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12337],"tags":[1291,944,727,1290],"yoast_head":"\nKB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty | Ephesoft Docs<\/title>\n<meta name=\"robots\" content=\"noindex, follow\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty\" \/>\n<meta property=\"og:description\" content=\"Issue Description: If you are observing below Error message when Ephesoft is configured over https in tomcat and truststore & […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/\" \/>\n<meta property=\"og:site_name\" content=\"Ephesoft Docs\" \/>\n<meta property=\"article:published_time\" content=\"2018-04-10T17:38:42+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2020-08-26T23:14:47+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/\",\"url\":\"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/\",\"name\":\"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty | Ephesoft Docs\",\"isPartOf\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\"},\"datePublished\":\"2018-04-10T17:38:42+00:00\",\"dateModified\":\"2020-08-26T23:14:47+00:00\",\"author\":{\"@id\":\"\"},\"breadcrumb\":{\"@id\":\"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/ephesoft.com\/docs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/ephesoft.com\/docs\/#website\",\"url\":\"https:\/\/ephesoft.com\/docs\/\",\"name\":\"Ephesoft Docs\",\"description\":\"Intelligent Document Processing Made Easy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/ephesoft.com\/docs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty | Ephesoft Docs","robots":{"index":"noindex","follow":"follow"},"og_locale":"en_US","og_type":"article","og_title":"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty","og_description":"Issue Description: If you are observing below Error message when Ephesoft is configured over https in tomcat and truststore & […]","og_url":"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/","og_site_name":"Ephesoft Docs","article_published_time":"2018-04-10T17:38:42+00:00","article_modified_time":"2020-08-26T23:14:47+00:00","twitter_card":"summary_large_image","twitter_misc":{"Written by":"","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/","url":"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/","name":"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty | Ephesoft Docs","isPartOf":{"@id":"https:\/\/ephesoft.com\/docs\/#website"},"datePublished":"2018-04-10T17:38:42+00:00","dateModified":"2020-08-26T23:14:47+00:00","author":{"@id":""},"breadcrumb":{"@id":"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/ephesoft.com\/docs\/kb00021767-java-security-invalidalgorithmparameterexception-the-trustanchors-parameter-must-be-non-empty\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ephesoft.com\/docs\/"},{"@type":"ListItem","position":2,"name":"KB00021767: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty"}]},{"@type":"WebSite","@id":"https:\/\/ephesoft.com\/docs\/#website","url":"https:\/\/ephesoft.com\/docs\/","name":"Ephesoft Docs","description":"Intelligent Document Processing Made Easy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ephesoft.com\/docs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":""}]}},"_links":{"self":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/posts\/14977"}],"collection":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/comments?post=14977"}],"version-history":[{"count":0,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/posts\/14977\/revisions"}],"wp:attachment":[{"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/media?parent=14977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/categories?post=14977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ephesoft.com\/docs\/wp-json\/wp\/v2\/tags?post=14977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}