title: Where should the jssecacerts file be placed on Mac?
body: <p>I am trying to connect a webapp, running in Tomcat 7.0.34 on a Mac, OS/X 10.10 (Yosemite), to a secure AD server.  I get this error:</p>
  
  <pre><code>org.springframework.ldap.CommunicationException: qlty-test-ad:636; nested exception is javax.naming.CommunicationException: qlty-test-ad:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]
  at org.springframework.ldap.support.LdapUtils.convertLdapException(LdapUtils.java:100)
  at org.springframework.ldap.core.support.AbstractContextSource.createContext(AbstractContextSource.java:266)
  at org.springframework.ldap.core.support.AbstractContextSource.getContext(AbstractContextSource.java:106)
  at org.springframework.ldap.core.support.AbstractContextSource.getReadOnlyContext(AbstractContextSource.java:125)
  at org.springframework.ldap.core.LdapTemplate.executeReadOnly(LdapTemplate.java:792)
  at org.springframework.ldap.core.LdapTemplate.lookup(LdapTemplate.java:822)
  at org.springframework.ldap.core.LdapTemplate.lookupContext(LdapTemplate.java:1315)
  at com.enonic.cms.ee.ldap.LdapConnector.lookup(LdapConnector.java:261)
  at com.enonic.cms.ee.ldap.LdapRemoteUserStorePlugin.verifyConnection(LdapRemoteUserStorePlugin.java:489)
  ... 87 more
  </code></pre>
  
  <p>So, I am missing a server certificate.  I downloaded it with <a href="https://github.com/escline/InstallCert/blob/master/InstallCert.java" rel="nofollow">InstallCert</a> and got the jssecacerts file, and as far as I can understand, I just need to place it in a folder where my JVM can find it and use it.  First I tried, directly in the jdk:</p>
  
  <p><code>/Library/Java/JavaVirtualMachines/jdk1.7.0_71.jdk/Contents/Home/lib/</code></p>
  
  <p>Descriptions suggest there should be a "security" folder inside "lib", but there isn't.  I tried to create one, then put the jssecacerts file here, but it did not help.</p>
  
  <p>Then, I found a reference to this folder:</p>
  
  <p><code>/System/Library/Java/Support/CoreDeploy.bundle/Contents/Home/lib/security/</code></p>
  
  <p>It allready contained the "cacerts" file, so I thought I was on to something, but placing "jssecacerts" here does not help either.  There is also </p>
  
  <p><code>/Library/Java/Home/lib/security</code></p>
  
  <p>which contains symbolic links to both files ("cacerts" and "jssecacerts").</p>
  
  <p><strong>Does anybody know where I should put <code>jssecacerts</code>?</strong></p>