ERRO SSL Provider:SunJSSE

public class InstallCert {

    public static void main(String[] arg) throws Exception {
        List<String> hostList = new ArrayList<String>();
        hostList.add("nfe.sefaz.ba.gov.br");
        hostList.add("nfe.sefaz.am.gov.br");
        hostList.add("nfe.sefaz.ce.gov.br");
        hostList.add("nfe.sefaz.go.gov.br");
        hostList.add("nfe.fazenda.mg.gov.br");
        hostList.add("nfe.fazenda.ms.gov.br");
        hostList.add("nfe.sefaz.mt.gov.br");
        hostList.add("nfe.sefaz.pe.gov.br");
        hostList.add("nfe2.fazenda.pr.gov.br");
        hostList.add("nfe.sefaz.rs.gov.br");
        hostList.add("nfe.fazenda.sp.gov.br");
        hostList.add("sef.sefaz.rs.gov.br");
        hostList.add("www.sefazvirtual.fazenda.gov.br");
        hostList.add("nfe.sefazvirtual.rs.gov.br");
        for (String host : hostList) {
            instala(host);
        }
    }

    public static void instala(String host) throws Exception {
        // Cria o arquivo onde serão adicionados os certificados.
        String trustStoreName = "trust_store_nfe";  //nome do arquiov gerado
        File file = new File(trustStoreName);
        if (file.isFile() == false) {
            char SEP = File.separatorChar;
            File dir = new File(System.getProperty("java.home") + SEP + "lib" + SEP + "security");
            file = new File(dir, trustStoreName);
            if (file.isFile() == false) {
                file = new File(dir, "cacerts");
            }
        }
        System.out.println("*** " + host + " no arquivo " + file.getAbsolutePath() + " ***");

        int port = 443;
        char[] passphrase = "changeit".toCharArray();

        InputStream in = new FileInputStream(file);
        KeyStore ks = KeyStore.getInstance(KeyStore.getDefaultType());
        ks.load(in, passphrase);
        in.close();

        SSLContext context = SSLContext.getInstance("TLS");
        TrustManagerFactory tmf = TrustManagerFactory.getInstance(TrustManagerFactory.getDefaultAlgorithm());
        tmf.init(ks);
        X509TrustManager defaultTrustManager = (X509TrustManager) tmf.getTrustManagers()[0];
        SavingTrustManager tm = new SavingTrustManager(defaultTrustManager);
        context.init(null, new TrustManager[]{tm}, null);
        SSLSocketFactory factory = context.getSocketFactory();

        // Comunica-se com o servidor para obter os certificados.
        SSLSocket socket = (SSLSocket) factory.createSocket(host, port);
        socket.setSoTimeout(10000);
        try {
            socket.startHandshake();
            socket.close();
        } catch (SSLException e) {
            e.printStackTrace(System.out);
        }

        X509Certificate[] chain = tm.chain;
        if (chain == null) {
            System.out.println("*** Could not obtain server certificate chain");
            return;
        }

        // Processa cada um dos certificados recebidos na cadeia do servidor.
        MessageDigest sha1 = MessageDigest.getInstance("SHA1");
        MessageDigest md5 = MessageDigest.getInstance("MD5");
        for (int i = 0; i < chain.length; i++) {
            X509Certificate cert = chain[i];
            sha1.update(cert.getEncoded());
            md5.update(cert.getEncoded());
        }

        int k = 0;
        X509Certificate cert = chain[k];
        String alias = host + "-" + (k + 1);
        ks.setCertificateEntry(alias, cert);

        OutputStream out = new FileOutputStream(trustStoreName);
        ks.store(out, passphrase);
        out.close();
        System.out.println("*** Added certificate to keystore '" + trustStoreName + "' using alias '" + alias + "'");
    }
    private static final char[] HEXDIGITS = "0123456789abcdef".toCharArray();

    private static String toHexString(byte[] bytes) {
        StringBuilder sb = new StringBuilder(bytes.length * 3);
        for (int b : bytes) {
            b &= 0xff;
            sb.append(HEXDIGITS[b >> 4]);
            sb.append(HEXDIGITS[b & 15]);
            sb.append(' ');
        }
        return sb.toString();
    }

    private static class SavingTrustManager implements X509TrustManager {

        private final X509TrustManager tm;
        private X509Certificate[] chain;

        SavingTrustManager(X509TrustManager tm) {
            this.tm = tm;
        }

        @Override
        public X509Certificate[] getAcceptedIssuers() {
            throw new UnsupportedOperationException();
        }

        @Override
        public void checkClientTrusted(X509Certificate[] chain, String authType) throws CertificateException {
            throw new UnsupportedOperationException();
        }

        @Override
        public void checkServerTrusted(X509Certificate[] chain, String authType) throws CertificateException {
            this.chain = chain;
            tm.checkServerTrusted(chain, authType);
        }
    }
}

System.setProperty("java.protocol.handler.pkgs", "com.sun.net.ssl.internal.www.protocol");
        Security.addProvider(new com.sun.net.ssl.internal.ssl.Provider());
        System.setProperty("javax.net.ssl.keyStoreType", "PKCS12");
        System.clearProperty("javax.net.ssl.keyStore");
        System.clearProperty("javax.net.ssl.keyStorePassword");
        System.clearProperty("javax.net.ssl.trustStore");
        System.setProperty("javax.net.ssl.keyStore", caminhoCertificado);
        System.setProperty("javax.net.ssl.keyStorePassword", senhaCertificado);
        System.setProperty("javax.net.ssl.trustStoreType", "JKS");
        if (!Tools.FileSystem.exists("trust_store_nfe")) {
            File file = new File(".");
            throw new Throwable("O arquivo de chaves da aplicação não foi encontrado na pasta " + file.getCanonicalPath());
        }
        System.setProperty("javax.net.ssl.trustStore", "trust_store_nfe"); //este é o arquivo gerado pela InstallCert

java System.setProperty(“javax.net.ssl.trustStore”, “C:/Certificados/xxx.jks”);

java System.setProperty(“javax.net.ssl.trustStorePassword”, “xxx”);

java System.setProperty(“javax.net.ssl.keyStore”, “xxx.ks”);

java System.setProperty(“javax.net.ssl.keyStorePassword”, “xxx”);

server.xml(TOMCAT)

Connector port=“8443”

maxThreads=“150” minSpareThreads=“25” maxSpareThreads=“75”

enableLookups=“false” disableUploadTimeout=“true”

acceptCount=“100” keystoreFile=“C:\Certificados\xxx.jks” keystorePass=“xxx” debug=“0” scheme=“https” secure=“true”

clientAuth=“false” sslProtocol=“TLS” />

javax.servlet.ServletException: java.lang.RuntimeException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target(-10001)

at SdtServiceGinfesImplService.consultarsituacaoloterpsv3(SdtServiceGinfesImplService.java:1646)

at xmlteste_impl.e110G2(xmlteste_impl.java:462)

at xmlteste_impl.evt0G2(xmlteste_impl.java:326)

at xmlteste_impl.dispatchEvents(xmlteste_impl.java:207)

at appmasterpage_impl.evt012(appmasterpage_impl.java:248)

at appmasterpage_impl.ws012(appmasterpage_impl.java:154)

at appmasterpage_impl.webExecute(appmasterpage_impl.java:55)

at xmlteste_impl.webExecute(xmlteste_impl.java:94)

at com.genexus.webpanels.GXWebObjectBase.doExecute(Unknown Source)

at xmlteste.doExecute(xmlteste.java:30)

at com.genexus.webpanels.GXWebObjectStub.callExecute(Unknown Source)

at com.genexus.webpanels.GXWebObjectStub.doPost(Unknown Source)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

at org.apache.catalina.servlets.InvokerServlet.serveRequest(InvokerServlet.java:419)

at org.apache.catalina.servlets.InvokerServlet.doPost(InvokerServlet.java:169)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)

at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)

Continua…

java System.setProperty(“javax.net.ssl.trustStore”, “C:/Certificados/cer/Xxx.jks”);

java System.setProperty(“javax.net.ssl.trustStorePassword”, “xxx”);

java System.setProperty(“javax.net.ssl.keyStore”, “Xxx.ks”);

java System.setProperty(“javax.net.ssl.keyStorePassword”, “xxx”);