I’m keep seeing this in the console. Is it mandatory to import the vaadin certificates to stop seeing this message in the console? Any other way to bypass this? I do not have access to import any 3rd party certs into the JVM so not sure how to stop this
2026-06-24T10:03:54.527-04:00 WARN 25676 — [holon-vaadin-flow-demo] [ctor-http-nio-8] com.vaadin.copilot.CopilotServerClient : Unable to send request to Vaadin Copilot server, error: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2026-06-24T10:03:54.528-04:00 WARN 25676 — [holon-vaadin-flow-demo] [ctor-http-nio-8] c.v.c.s.r.n.h.client.HttpClientConnect : [64e4bccc, L:/10.115.27.113:49833 - R:copilot.vaadin.com/79.125.55.247:443] The connection observed an error
javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:383) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1287) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1164) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1107) ~[na:na]
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[na:na]
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[na:na]
at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[na:na]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1711) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1557) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1393) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1444) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:545) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:484) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:296) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1429) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:918) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:176) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.handle(AbstractNioChannel.java:445) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler$DefaultNioRegistration.handle(NioIoHandler.java:388) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.processSelectedKey(NioIoHandler.java:596) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.processSelectedKeysOptimized(NioIoHandler.java:571) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.processSelectedKeys(NioIoHandler.java:512) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.run(NioIoHandler.java:484) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.SingleThreadIoEventLoop.runIo(SingleThreadIoEventLoop.java:225) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.SingleThreadIoEventLoop.run(SingleThreadIoEventLoop.java:196) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:1195) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) ~[copilot-25.1.0.jar:25.1.0]
at java.base/java.lang.Thread.run(Thread.java:1583) ~[na:na]
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:388) ~[na:na]
at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:271) ~[na:na]
at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[na:na]
at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[na:na]
at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1265) ~[na:na]
… 31 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148) ~[na:na]
at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129) ~[na:na]
at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~[na:na]
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383) ~[na:na]
… 36 common frames omitted
2026-06-24T10:03:54.528-04:00 ERROR 25676 — [holon-vaadin-flow-demo] [ CopilotAsync-3] c.v.copilot.VersionReleaseNoteHandler : Error while sending version release note handler
javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.net.http/jdk.internal.net.http.HttpClientImpl.send(HttpClientImpl.java:960) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.HttpClientFacade.send(HttpClientFacade.java:133) ~[java.net.http:na]
at com.vaadin.copilot.VersionReleaseNoteHandler.sendVersionRequestAndFillResponse(VersionReleaseNoteHandler.java:56) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.VersionReleaseNoteHandler.handleMessage(VersionReleaseNoteHandler.java:39) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.CopilotSession.lambda$handleMessageAsync$2(CopilotSession.java:131) ~[copilot-25.1.0.jar:25.1.0]
at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run$$$capture(CompletableFuture.java:1804) ~[na:na]
at java.base/java.util.concurrent.CompletableFuture$AsyncRun.run(CompletableFuture.java) ~[na:na]
at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1144) ~[na:na]
at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:642) ~[na:na]
at java.base/java.lang.Thread.run(Thread.java:1583) ~[na:na]
Caused by: javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:383) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1287) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1164) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1107) ~[na:na]
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[na:na]
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[na:na]
at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[na:na]
at java.base/java.util.ArrayList.forEach(ArrayList.java:1596) ~[na:na]
at java.net.http/jdk.internal.net.http.common.SSLFlowDelegate.lambda$executeTasks$3(SSLFlowDelegate.java:1148) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.HttpClientImpl$DelegatingExecutor.execute(HttpClientImpl.java:177) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SSLFlowDelegate.executeTasks(SSLFlowDelegate.java:1143) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SSLFlowDelegate.doHandshake(SSLFlowDelegate.java:1109) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SSLFlowDelegate$Reader.processData(SSLFlowDelegate.java:508) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SSLFlowDelegate$Reader$ReaderDownstreamPusher.run(SSLFlowDelegate.java:283) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SequentialScheduler$LockingRestartableTask.run(SequentialScheduler.java:182) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SequentialScheduler$CompleteRestartableTask.run(SequentialScheduler.java:149) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SequentialScheduler$TryEndDeferredCompleter.complete(SequentialScheduler.java:324) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SequentialScheduler$CompleteRestartableTask.run(SequentialScheduler.java:151) ~[java.net.http:na]
at java.net.http/jdk.internal.net.http.common.SequentialScheduler$SchedulableTask.run(SequentialScheduler.java:207) ~[java.net.http:na]
… 3 common frames omitted
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:388) ~[na:na]
at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:271) ~[na:na]
at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[na:na]
at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[na:na]
at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1265) ~[na:na]
… 23 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148) ~[na:na]
at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129) ~[na:na]
at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~[na:na]
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383) ~[na:na]
… 28 common frames omitted
2026-06-24T10:03:54.530-04:00 WARN 25676 — [holon-vaadin-flow-demo] [ctor-http-nio-8] c.v.c.s.r.n.h.client.HttpClientConnect : [64e4bccc, L:/10.115.27.113:49833 ! R:copilot.vaadin.com/79.125.55.247:443] The connection observed an error
com.vaadin.copilot.shaded.io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:515) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:296) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:357) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1429) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:918) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:176) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.AbstractNioChannel$AbstractNioUnsafe.handle(AbstractNioChannel.java:445) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler$DefaultNioRegistration.handle(NioIoHandler.java:388) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.processSelectedKey(NioIoHandler.java:596) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.processSelectedKeysOptimized(NioIoHandler.java:571) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.processSelectedKeys(NioIoHandler.java:512) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.nio.NioIoHandler.run(NioIoHandler.java:484) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.SingleThreadIoEventLoop.runIo(SingleThreadIoEventLoop.java:225) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.channel.SingleThreadIoEventLoop.run(SingleThreadIoEventLoop.java:196) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.util.concurrent.SingleThreadEventExecutor$5.run(SingleThreadEventExecutor.java:1195) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30) ~[copilot-25.1.0.jar:25.1.0]
at java.base/java.lang.Thread.run(Thread.java:1583) ~[na:na]
Caused by: javax.net.ssl.SSLHandshakeException: (certificate_unknown) PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:130) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:383) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:326) ~[na:na]
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1287) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1164) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1107) ~[na:na]
at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:393) ~[na:na]
at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:477) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1273) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1260) ~[na:na]
at java.base/java.security.AccessController.doPrivileged(AccessController.java:714) ~[na:na]
at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1205) ~[na:na]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1711) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1557) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1393) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1444) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:545) ~[copilot-25.1.0.jar:25.1.0]
at com.vaadin.copilot.shaded.io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:484) ~[copilot-25.1.0.jar:25.1.0]
… 17 common frames omitted
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:388) ~[na:na]
at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:271) ~[na:na]
at java.base/sun.security.validator.Validator.validate(Validator.java:256) ~[na:na]
at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:284) ~[na:na]
at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144) ~[na:na]
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1265) ~[na:na]
… 31 common frames omitted
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148) ~[na:na]
at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129) ~[na:na]
at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297) ~[na:na]
at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383) ~[na:na]
… 36 common frames omitted