Confluence won't start after Upgrade to 8.7.1

[Andreas Hirtzel]

I upgraded Confluence because of CVE message to 8.7.1 and it won't start anymore. I migrated the settings from 8.5.3 to 8.7.1 as all the time before. But now the connection to the database is not possible. Got the message:

Unable to open database connection during bootstrap.
com.microsoft.sqlserver.jdbc.SQLServerException: "encrypt" property is set to "true" and "trustServerCertificate" property is set to "false" but the driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption: Error: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target. ClientConnectionId:5d708cc1-3ca6-43e9-953f-f42f82d3ae1b

Didn't found any change announce for sql server connections. Can you help please?

[Andreas Hirtzel · Accepted solution]

So, the problem was in front of the desk or maybe the designer for the download page. I tried to upgrade a server instance with a data center package. So this won't work. But I didn't see clear enough the "DATA CENTER ONLY" hint at the download page. I reinstalled the LTS version 8.5.4 and it works fine.

[Metin Savignano]

This sounds like you are using a custom CA or a self-signed certificate and you need to import the root certificate into the truststore of the Java VM which runs Confluence. Either that or set the trustServerCertificate to false, which is not recommended as it effectively removes connection security.

I don't think the default has been changed between 8.5 and 8.7, but I might be wrong. Could it be that you forgot that you imported the root certificate last time?

[Andreas Hirtzel]

That's the mystic thing. The error message is clear but I didn't use encrypted connections before and it works well. 

[Shawn Doyle - ReleaseTEAM]

I did a quick search and did not see any announcements on SQL connection tweaks between those two versions either.

It does look like there may have been some settings added between the two versions, when you migrated the settings, did you save the original 8.7.1?  If so (or not, grab a new 8.7.1) and compare the differences.

There are troubleshooting procedures toward the bottom of the following link when you get the can't connect error on start-up.

https://confluence.atlassian.com/conf86/advanced-encryption-1295819300.html

If there is anything useful in this log? <home-directory>/logs/atlassian-confluence.log,