Could not read from VoiceRSS service after upgrade to 4.3.5

I recently upgraded from 4.2.x to 4.3.5 and my VoiceRSS TTS is failing with “Could not read from VoiceRSS service: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target”.

I bumped up the log level and can see that it makes a call to the VoiceRSS API just before this error:

2025-06-29 17:05:18.397 [DEBUG] [.internal.cloudapi.VoiceRSSCloudImpl] - Call https://api.voicerss.org/?key=***&hl=en-AU&c=WAV&f=16khz_16bit_mono&src=Hello&v=Evie
2025-06-29 17:05:19.091 [WARN ] [core.voice.internal.VoiceManagerImpl] - Error saying 'Hello ': Could not read from VoiceRSS service: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I can run that call fine in my browser (with my key).

Any ideas?

1 Like

same problem here… i didn’t notice that was after the upgrade…
I will try to rollback!

As mentioned here, it works for me in OH 5.

I’m experiencing the same issue with openHAB version 4.3.5.

Here is my error message:

2025-07-01 22:31:42.690 [WARN ] [.openhab.core.voice.internal.VoiceManagerImpl] - Error saying 'Test!': Could not read from VoiceRSS service: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

It used to work fine before.
I already cleared the cache – didn’t help.

Maybe they use a new certificate that is signed with an untrusted certificate? In that case updating your OS or Java may help so it updates the list of trusted certificates.

SSL certificate is fine:

An outdated OS/Java on a computer may still not trust the certificates. It won’t use that website to check the validity. :wink:

I spent a couple of hours this afternoon looking into this and have now resolved it.

For anyone interested, I’m running Raspberry Pi OS (Linux) and the first thing I tried was patching and a reboot. I was already running the latest OpenJDK17 package.

I think tried installing and using the latest Azul Zulu Build of OpenJDK 17, which also had the same problem so I went back to OpenJDK.

I then noticed that the Sectigo root certificate of api.voicerss.org’s SSL certificate wasn’t in /etc/ssl/certs/java/cacerts so I imported it from the OS’s copy in /etc/ssl/certs - problem solved.

Hope this helps anyone else who may run into this.

1 Like

It has been working perfectly for me again since yesterday without any changes to my openHab system

1 Like

I added two certificates (Sectigo R46 and Sectigo E46) and restarted the VoiceRSS bundle but I have the same error. Any suggestion?