Windchill PDMLink 中发生错误“PKIX 路径构建失败：sun.security.provider.certpath.SunCertPathBuilderException：无法找到到请求目标的有效认证路径”

• 用户无法登录 Windchill，出现以下错误
• 将参与者添加到表时， UI 上显示以下错误

  ### INFO  wt.system.err ### - javax.naming.CommunicationException: simple bind failed:  [Root exception is javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

• 调用查询生成器 API 来搜索对象，出现以下错误

  wt.httpgw.HTTPAuthentication - HTTP login failed: client host = 10.xxx.xxx.xxx

• 升级后无法调用 RMI 错误

  Exception in thread "main" wt.util.WTRemoteException: Unable to invoke remote method; nested exception is:
  	javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  ...
  Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
  

• 启用 SSO 后执行身份验证命令时用户收到以下错误

[main] DEBUG wt.httpgw.HTTPLogin - Opening URL connection to https://aaa.bbb.ccc/Windchill/servlet/WindchillAuthGW/wt.httpgw.HTTPAuthentication/login
[main] DEBUG wt.httpgw.HTTPLogin - Unexpected content type: null
[main] DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
       
        at wt.auth.Authentication.main(Authentication.java:235) [codebase/:?]
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
     

• 启用群集以使用 SSL 证书后， wt.auth.Authentication不起作用
• wt.auth.Authentication 命令失败并出现以下错误：

   DEBUG wt.httpgw.HTTPLogin - Failed to get input stream from connection javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alert.createSSLException(Alert.java:131)

• 通过 LoadFileSet 命令行加载 OIR 时， wt.auth.Authentication不起作用，它会报告以下错误

PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target reactor

• 将证书导入 Java 密钥库后，某些保管库安装位置验证失败
• 配置远程文件服务器（RFS）广播配置失败后
• 无法在 Windchill 上上传文件，出现以下错误

ERROR [pool-12-thread-2] wt.fv.FvMountValidator  - javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target reactor.core.Exceptions$ReactiveException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
                       at reactor.core.Exceptions.propagate(Exceptions.java:396)
                       at reactor.core.publisher.BlockingSingleSubscriber.blockingGet(BlockingSingleSubscriber.java:97)
                       at reactor.core.publisher.Mono.block(Mono.java:1707)
                       at com.azure.storage.common.implementation.StorageImplUtils.blockWithOptionalTimeout(StorageImplUtils.java:191)
                       at com.azure.storage.blob.specialized.BlobClientBase.getPropertiesWithResponse(BlobClientBase.java:1305)
                       at com.azure.storage.blob.specialized.BlobClientBase.getProperties(BlobClientBase.java:1274)
                       at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.getProperties(BlobContentFile.java:585)
                       at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.loadAttributes(BlobContentFile.java:276)
                       at com.ptc.windchill.objectstorage.azureblob.BlobContentFile.exists(BlobContentFile.java:123)
                       at wt.fv.FvMountValidator.validateFvMountPath(FvMountValidator.java:931)
                       at wt.fv.FvMountValidator$ValidateOnThisMSTask.call(FvMountValidator.java:2969)
                       at wt.fv.FvMountValidator$ValidateOnThisMSTask.call(FvMountValidator.java:2943)
                       at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
                       at java.base/java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:515)
                       at java.base/java.util.concurrent.FutureTask.run(FutureTask.java:264)
                       at java.base/java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128)
                       at java.base/java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628)
                       at java.base/java.lang.Thread.run(Thread.java:829)
                       Suppressed: java.lang.Exception: #block terminated with an error
                                      at reactor.core.publisher.BlockingSingleSubscriber.blockingGet(BlockingSingleSubscriber.java:99)
                                      ... 16 more
Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

• 方法服务器日志中报告的证书问题
• 发布失败，方法服务器日志中出现以下错误痕迹

 Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)

• 无法将可配置链接示例添加到 Windchill 环境