# How to setup SSL certs for Nexus IQ CLI Installed using linux binary

You have selected **0** posts.

## post by hkaur6 on Sep 23, 2024

Hardeep Kaur  
hkaur6  
Sonatype Customer

I am a beginner to sonatype products, currently exploring lifecycle scanning capabilities. While attempting to scan a code repo using nexus-iq-cli I run into SSL related errors. I am unable to find documentation for resolving this issue. Can someone help point me in the right direction?

Command line:

```
./nexus-iq-cli -s https://iq-server/ -a : -i
```

Error Trace:

```
PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
```

Error details below:

```
javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base@17.0.12/sun.security.ssl.Alert.createSSLException(Alert.java:131)
...
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
```

[Sonatype CLI](https://help.sonatype.com/en/sonatype-iq-cli.html) - Downloaded latest version from linux here. I don’t have java setup. Is it required?

## post by mfrost on Sep 30, 2024

Maura Frost  
mfrost  
Sonatypers

Hi [@hkaur6](https://community.sonatype.com/u/hkaur6)! As a licensed customer, I would recommend engaging with our support team if you haven’t already. Have your [authorized support contact](https://support.sonatype.com/hc/en-us/articles/213463608-Sonatype-Product-Support-FAQ#HowdoImanageauthorizedsupportcontactsinformationformyorganization?) contact us at [https://support.sonatype.com/](https://support.sonatype.com/)

---

### New & Unread Topics

| Topic | Replies | Views | Activity |
| --- | --- | --- | --- |
| [IQ Firewall: Database update frequency and coverage of new libraries against recent threats](https://community.sonatype.com/t/iq-firewall-database-update-frequency-and-coverage-of-new-libraries-against-recent-threats/16401) | [4](https://community.sonatype.com/t/iq-firewall-database-update-frequency-and-coverage-of-new-libraries-against-recent-threats/16401/1) | 39 | [Jun 9](https://community.sonatype.com/t/iq-firewall-database-update-frequency-and-coverage-of-new-libraries-against-recent-threats/16401/5) |
| [Batch Deletion of expired waivers](https://community.sonatype.com/t/batch-deletion-of-expired-waivers/16437) | [1](https://community.sonatype.com/t/batch-deletion-of-expired-waivers/16437/1) | 26 | [26d](https://community.sonatype.com/t/batch-deletion-of-expired-waivers/16437/2) |
| [how to use remote tcp socket instead of local unix socket for nexus iq container image scan for pulling neuvector image from private registry](https://community.sonatype.com/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271) | [1](https://community.sonatype.com/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271/1) | 65 | [Apr 21](https://community.sonatype.com/t/how-to-use-remote-tcp-socket-instead-of-local-unix-socket-for-nexus-iq-container-image-scan-for-pulling-neuvector-image-from-private-registry/16271/2) |
| [Bom scan does not generate a report](https://community.sonatype.com/t/bom-scan-does-not-generate-a-report/16097) | [3](https://community.sonatype.com/t/bom-scan-does-not-generate-a-report/16097/1) | 122 | [Mar 11](https://community.sonatype.com/t/bom-scan-does-not-generate-a-report/16097/4) |
| [Package Coverage Issue](https://community.sonatype.com/t/package-coverage-issue/15838) | [2](https://community.sonatype.com/t/package-coverage-issue/15838/1) | 124 | [Jun 22](https://community.sonatype.com/t/package-coverage-issue/15838/3) |