Failed connection between Portal and Salesforce javax.net.ssl.SSLHandshakeException.

Failed connection between Portal and Salesforce with following exception:

  
Caused by: com.sforce.ws.ConnectionException: Failed to send request to https://salesforce--blalba.cs15.my.salesforce.com/services/Soap/c/28.0/00De0000005PAIP/0DFc0000000Cadc
	at com.sforce.ws.transport.SoapConnection.send(SoapConnection.java:120)
	at com.sforce.soap.enterprise.EnterpriseConnection.query(EnterpriseConnection.java:674)
	at com.cochlear.sforce.connection.ManagedConnectionImpl.query(ManagedConnectionImpl.java:55)
	... 54 more

Caused by: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
	java.security.cert.CertPathValidatorException: The certificate issued by CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE is not trusted; internal cause is: 
	java.security.cert.CertPathValidatorException: Certificate chaining error
	at com.ibm.jsse2.o.a(o.java:44)
	at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:723)
	at com.ibm.jsse2.kb.a(kb.java:70)
	at com.ibm.jsse2.kb.a(kb.java:192)
	at com.ibm.jsse2.lb.a(lb.java:333)
	at com.ibm.jsse2.lb.a(lb.java:133)
	at com.ibm.jsse2.kb.s(kb.java:45)
	at com.ibm.jsse2.kb.a(kb.java:306)
	at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:421)
	at com.ibm.jsse2.SSLSocketImpl.h(SSLSocketImpl.java:254)
	at com.ibm.jsse2.SSLSocketImpl.a(SSLSocketImpl.java:525)
	at com.ibm.jsse2.SSLSocketImpl.startHandshake(SSLSocketImpl.java:790)
	at com.ibm.net.ssl.www2.protocol.https.c.afterConnect(c.java:131)
	at com.ibm.net.ssl.www2.protocol.https.d.connect(d.java:70)
	at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:1043)
	at com.ibm.net.ssl.www2.protocol.https.b.getOutputStream(b.java:7)
	at com.sforce.ws.transport.JdkHttpTransport.connectRaw(JdkHttpTransport.java:135)
	at com.sforce.ws.transport.JdkHttpTransport.connectLocal(JdkHttpTransport.java:99)
	at com.sforce.ws.transport.JdkHttpTransport.connectLocal(JdkHttpTransport.java:94)
	at com.sforce.ws.transport.JdkHttpTransport.connect(JdkHttpTransport.java:90)
	at com.sforce.ws.transport.SoapConnection.send(SoapConnection.java:94)
	... 56 more
Caused by: com.ibm.jsse2.util.j: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
	java.security.cert.CertPathValidatorException: The certificate issued by CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE is not trusted; internal cause is: 
	java.security.cert.CertPathValidatorException: Certificate chaining error
	at com.ibm.jsse2.util.h.b(h.java:40)
	at com.ibm.jsse2.util.h.b(h.java:7)
	at com.ibm.jsse2.util.g.a(g.java:11)
	at com.ibm.jsse2.pc.a(pc.java:22)
	at com.ibm.jsse2.pc.checkServerTrusted(pc.java:94)
	at com.ibm.ws.ssl.core.WSX509TrustManager.checkServerTrusted(WSX509TrustManager.java:359)
	at com.ibm.jsse2.lb.a(lb.java:533)
	... 72 more
Caused by: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is: 
	java.security.cert.CertPathValidatorException: The certificate issued by CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE is not trusted; internal cause is: 
	java.security.cert.CertPathValidatorException: Certificate chaining error
	at com.ibm.security.cert.PKIXCertPathBuilderImpl.engineBuild(PKIXCertPathBuilderImpl.java:411)
	at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:258)
	at com.ibm.jsse2.util.h.b(h.java:55)
	... 78 more

RESOLVED

1. Login to WebSphere Admin Console

2. Navigate to Security -> SSL certificate and key management > Key stores and certificates > CellDefaultTrustStore > Signer certificates

3. Check for Salesforce certificate expired, if expired then retrieve for new certificate from Salesforce.

4. Make sure the certificate signer signature from websphere match with actual certificate from Salesforce ws endpoint