Certification error during the connection between a DSC and a CH

[boxer-code]

Hi, I'm trying to connect a self-hosted clearing-house to the DataspaceConnectors of the IDS-Testbed but I ran into a certification error. When the connectors made an agreement and try to connect to the CH the following error appears at the obtained logs of the connector:

2022-03-25T14:29:07,230 [https-jsse-nio-8080-exec-4] INFO - Sending request to https://tc-core:9999/process/9f25d50f-e268-44ee-84b7-0e7cc988d1cf ...

2022-03-25T14:29:07,310 [https-jsse-nio-8080-exec-4] WARN - The recipient's certificate authority is not trusted. [exception=(PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)]

2022-03-25T14:29:07,313 [https-jsse-nio-8080-exec-4] WARN - Failed to send contract agreement to clearing house. [exception=(The recipient's certificate authority is not trusted.)]

2022-03-25T14:29:07,315 [https-jsse-nio-8080-exec-4] INFO - Using cached DAPS DAT. [expiration=(2022-03-25T14:54:31.000+0000)]

2022-03-25T14:29:07,348 [https-jsse-nio-8080-exec-4] INFO - Sending response with status OK (200).

I'm pretty confused by the certificates right now and I'm missing an overview about the different certificates and certificates formats used by the different components.
For example which certificate format do I need to add a new component to the truststore of the DSC? And what Points am I also missing during the installation of the certificates?

[SebastianOpriel]

Hi @boxer-code Please have a look at a similar answer here: #126 (comment)

You need to add the self-signed certificate of your tc-core to the truststore. Have a look here how to import a certificate into a p12 store: https://www.baeldung.com/import-cer-file-into-truststore

I know, that Broker uses a Java Keystore (jks). All other components use p12 stores. For checking the contents of the stores you might use KeyStore Explorer, which I find very handy.