I recently upgraded from 4.2.x to 4.3.5 and my VoiceRSS TTS is failing with “Could not read from VoiceRSS service: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”.
I bumped up the log level and can see that it makes a call to the VoiceRSS API just before this error:
2025-06-29 17:05:18.397 [DEBUG] [.internal.cloudapi.VoiceRSSCloudImpl] - Call https://api.voicerss.org/?key=***&hl=en-AU&c=WAV&f=16khz_16bit_mono&src=Hello&v=Evie
2025-06-29 17:05:19.091 [WARN ] [core.voice.internal.VoiceManagerImpl] - Error saying 'Hello ': Could not read from VoiceRSS service: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
I can run that call fine in my browser (with my key).
I’m experiencing the same issue with openHAB version 4.3.5.
Here is my error message:
2025-07-01 22:31:42.690 [WARN ] [.openhab.core.voice.internal.VoiceManagerImpl] - Error saying 'Test!': Could not read from VoiceRSS service: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
It used to work fine before.
I already cleared the cache – didn’t help.
Maybe they use a new certificate that is signed with an untrusted certificate? In that case updating your OS or Java may help so it updates the list of trusted certificates.
I spent a couple of hours this afternoon looking into this and have now resolved it.
For anyone interested, I’m running Raspberry Pi OS (Linux) and the first thing I tried was patching and a reboot. I was already running the latest OpenJDK17 package.
I think tried installing and using the latest Azul Zulu Build of OpenJDK 17, which also had the same problem so I went back to OpenJDK.
I then noticed that the Sectigo root certificate of api.voicerss.org’s SSL certificate wasn’t in /etc/ssl/certs/java/cacerts so I imported it from the OS’s copy in /etc/ssl/certs - problem solved.
Hope this helps anyone else who may run into this.