Hi to all.    i'm having the same issue, even after following the procedure.   What i did: 1) get the ssl certificate from AWS using the ssl: penssl s_client -showcerts -connect <source>:443 </dev/null | openssl x509 -text | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' 2) Copy the result to a *.crt file 3) convert the file to DEM openssl x509  -in aws_cert.crt  -inform PEM  -out aws_cert.der -outform DER 4) Create the jks file using keytools keytool  -import  -trustcacerts -alias aws3buckets  -file aws_cert.der  -keystore truststore-amazon.jks 5) change the permissions to be accessible from nifi. 6) add the file in the StandardSSLContextService and set password.   I receive the same e SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target   Do you have any clue how to solve this? I can use the crt file on the keytool? There is any version of keytool that we need to use?   Thanks     ... View more