Local Pushy MockServer and Client

[taylorearl288]

Hello,

I am trying to spin up a MockServer for local testing. I am using the certificates from the test resources directory (to hopefully rule out I have a legitimate certificate problem). When my client tries to actually send a notification, I get the following error and stacktrace.

2024-09-13 10:05:02 2024-09-13 16:05:02.708  WARN 1 --- [ntLoopGroup-3-1] c.eatthepath.pushy.apns.ApnsChannelPool  : Failed to create channel
2024-09-13 10:05:02 
2024-09-13 10:05:02 io.netty.handler.codec.DecoderException: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2024-09-13 10:05:02     at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:499)
2024-09-13 10:05:02     at io.netty.handler.codec.ByteToMessageDecoder.channelRead(ByteToMessageDecoder.java:290)
2024-09-13 10:05:02     at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:444)
2024-09-13 10:05:02     at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
2024-09-13 10:05:02     at io.netty.channel.AbstractChannelHandlerContext.fireChannelRead(AbstractChannelHandlerContext.java:412)
2024-09-13 10:05:02     at io.netty.channel.DefaultChannelPipeline$HeadContext.channelRead(DefaultChannelPipeline.java:1410)
2024-09-13 10:05:02     at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:440)
2024-09-13 10:05:02     at io.netty.channel.AbstractChannelHandlerContext.invokeChannelRead(AbstractChannelHandlerContext.java:420)
2024-09-13 10:05:02     at io.netty.channel.DefaultChannelPipeline.fireChannelRead(DefaultChannelPipeline.java:919)
2024-09-13 10:05:02     at io.netty.channel.nio.AbstractNioByteChannel$NioByteUnsafe.read(AbstractNioByteChannel.java:166)
2024-09-13 10:05:02     at io.netty.channel.nio.NioEventLoop.processSelectedKey(NioEventLoop.java:788)
2024-09-13 10:05:02     at io.netty.channel.nio.NioEventLoop.processSelectedKeysOptimized(NioEventLoop.java:724)
2024-09-13 10:05:02     at io.netty.channel.nio.NioEventLoop.processSelectedKeys(NioEventLoop.java:650)
2024-09-13 10:05:02     at io.netty.channel.nio.NioEventLoop.run(NioEventLoop.java:562)
2024-09-13 10:05:02     at io.netty.util.concurrent.SingleThreadEventExecutor$4.run(SingleThreadEventExecutor.java:997)
2024-09-13 10:05:02     at io.netty.util.internal.ThreadExecutorMap$2.run(ThreadExecutorMap.java:74)
2024-09-13 10:05:02     at io.netty.util.concurrent.FastThreadLocalRunnable.run(FastThreadLocalRunnable.java:30)
2024-09-13 10:05:02     at java.base/java.lang.Thread.run(Thread.java:840)
2024-09-13 10:05:02 Caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2024-09-13 10:05:02     at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:131)
2024-09-13 10:05:02     at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:378)
2024-09-13 10:05:02     at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)
2024-09-13 10:05:02     at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:316)
2024-09-13 10:05:02     at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1351)
2024-09-13 10:05:02     at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.onConsumeCertificate(CertificateMessage.java:1226)
2024-09-13 10:05:02     at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.consume(CertificateMessage.java:1169)
2024-09-13 10:05:02     at java.base/sun.security.ssl.SSLHandshake.consume(SSLHandshake.java:396)
2024-09-13 10:05:02     at java.base/sun.security.ssl.HandshakeContext.dispatch(HandshakeContext.java:480)
2024-09-13 10:05:02     at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1277)
2024-09-13 10:05:02     at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask$DelegatedAction.run(SSLEngineImpl.java:1264)
2024-09-13 10:05:02     at java.base/java.security.AccessController.doPrivileged(AccessController.java:712)
2024-09-13 10:05:02     at java.base/sun.security.ssl.SSLEngineImpl$DelegatedTask.run(SSLEngineImpl.java:1209)
2024-09-13 10:05:02     at io.netty.handler.ssl.SslHandler.runDelegatedTasks(SslHandler.java:1549)
2024-09-13 10:05:02     at io.netty.handler.ssl.SslHandler.unwrap(SslHandler.java:1395)
2024-09-13 10:05:02     at io.netty.handler.ssl.SslHandler.decodeJdkCompatible(SslHandler.java:1236)
2024-09-13 10:05:02     at io.netty.handler.ssl.SslHandler.decode(SslHandler.java:1285)
2024-09-13 10:05:02     at io.netty.handler.codec.ByteToMessageDecoder.decodeRemovalReentryProtection(ByteToMessageDecoder.java:529)
2024-09-13 10:05:02     at io.netty.handler.codec.ByteToMessageDecoder.callDecode(ByteToMessageDecoder.java:468)
2024-09-13 10:05:02     ... 17 common frames omitted
2024-09-13 10:05:02 Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2024-09-13 10:05:02     at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:439)
2024-09-13 10:05:02     at java.base/sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:306)
2024-09-13 10:05:02     at java.base/sun.security.validator.Validator.validate(Validator.java:264)
2024-09-13 10:05:02     at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:285)
2024-09-13 10:05:02     at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:144)
2024-09-13 10:05:02     at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1329)
2024-09-13 10:05:02     ... 31 common frames omitted
2024-09-13 10:05:02 Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
2024-09-13 10:05:02     at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)
2024-09-13 10:05:02     at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)
2024-09-13 10:05:02     at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)
2024-09-13 10:05:02     at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:434)
2024-09-13 10:05:02     ... 36 common frames omitted

The following code starts my MockServer

private void runServer() throws SSLException {
        String certificatePath = "/pushy/server-certs.pem";
        String privateKeyPath = "/pushy/server-key.pem";
        String caCertificate = "/pushy/ca.pem";
        String password = null;
        
        var mockServer = new MockApnsServerBuilder()
                .setServerCredentials(new File(getClass().getResource(certificatePath).getPath()), new File(getClass().getResource(privateKeyPath).getPath()), password)
                .setTrustedClientCertificateChain(getClass().getResourceAsStream(caCertificate))
                .setListener(new MockApnsServerListener() {
                    @Override
                    public void handlePushNotificationAccepted(Http2Headers headers, ByteBuf payload) {
                        System.out.println("Push notification accepted");
                    }

                    @Override
                    public void handlePushNotificationRejected(Http2Headers headers, ByteBuf payload, RejectionReason rejectionReason, Instant deviceTokenExpirationTimestamp) {
                        System.out.println("Push notification rejected: " + rejectionReason);
                    }
                })
                .setHandlerFactory(new AcceptAllPushNotificationHandlerFactory())
                .build();
        var future = mockServer.start(8089);
        future.whenComplete((v, t) -> {
            if (t != null) {
                System.out.println("Failed to start mock server");
            } else {
                System.out.println("Mock server started");
            }
        });
    }

The following code creates my client

public ApnsClient devApnsClient() {
     final String apnsHost = "host.docker.internal";
     final int port = 8089;
     final String MULTI_TOPIC_CLIENT_KEYSTORE_FILENAME = "pushy/multi-topic-client.p12";
     final String KEYSTORE_PASSWORD = "pushy-test";
     final String CA_CERTIFICATE_FILENAME = "pushy/ca.pem";
     var privateKeyResource = new ClassPathResource(MULTI_TOPIC_CLIENT_KEYSTORE_FILENAME);
     try {
         return new ApnsClientBuilder()
                 .setApnsServer(apnsHost, port)
                 .setClientCredentials(privateKeyResource.getFile(), KEYSTORE_PASSWORD)
                 .setTrustedServerCertificateChain(getClass().getResourceAsStream(CA_CERTIFICATE_FILENAME))
                 .build();
     } catch (SSLException e) {
         log.error("SSLException while trying to set up apns client: {}", e.getMessage());
     } catch (IOException e) {
         log.error("IOException while trying to set up apns client: {}", e.getMessage());
     }
     return null;
 }