Jira - LDAPS issue

[Deleted user]

Hello,

We meet an issue when we wanted to enable LDAPS via the CA certificate.

we have this error :

Connection test failed. Response from the server:
server.locall:636; nested exception is javax.naming.CommunicationException: server.locall:636 [Root exception is java.net.SocketException: Connection reset]

Some info :

Active Directory : Windows 2016

Jira Software : Windows 2012 R2

Jira Software version : 8.2.0

Java version : JDK 11.0.6 / JRE 1.8.0_241

Thank you for your help.

[Nic Brough -Adaptavist-]

Connection reset simply means that the server cut off your connection.  It is usually thrown by a network failure, but could be any of a load of other things.

You'll need to look at the logs from both ends of the connection to work out what the problem is.

[Deleted user]

Thank you. I have disabled the firewall from the DC and now, I have a new error :

[Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

I have added the root certificate and the AD cetificate from the file cacerts in Java but also from the JKS.

Thank you for your help.

[Deleted user]

I found the problem.

We must set the root CA + LDAPS server certificate in : 

JIRA\jre\lib\security\cacerts

Now, it's working.