nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Application links over https issue same machine

Miguel Angel Soriano_d7zwnl

Hi,

I have a big problem. I have migrated same machine (confluence,bitbucket and jira software). 3 installation independent.. I have bought 3 certificate in goddady. Everything working except application link.

The error is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

I have imported certificates (root, intermediate, or crt of goddady) in truststore java (cacerts)

I have revised:

https://community.atlassian.com/t5/Confluence-questions/Configure-Application-Links-Confluence-to-Jira/qaq-p/1170329

https://community.atlassian.com/t5/Confluence-questions/Application-links-over-https/qaq-p/747739

https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html?_ga=2.222968606.407962812.1570019609-1636446632.1554721878

What can i do??

Many thanks

Accepted answers

Jack Nolddor [Sweet Bananas]

Hi Miguel Angel,

Some thing to point out here:

You need to import the public part of related cert on the cacerts file used by your JVM for the other application as well. I mean, on Jira you must add the Confluence certs on the cacerts and viceversa.
After that, you need to reboot both applications
You can use the SSLPoke.class without reboot to see if you have added the certs correctly (see Diagnosis section)

Note that a SSLHandshakeException means that the certificates hasn't been added correctly or you forgot to reboot the application.

Regards

All comments

Jack Nolddor [Sweet Bananas]

Hi Miguel Angel,

Some thing to point out here:

You need to import the public part of related cert on the cacerts file used by your JVM for the other application as well. I mean, on Jira you must add the Confluence certs on the cacerts and viceversa.
After that, you need to reboot both applications
You can use the SSLPoke.class without reboot to see if you have added the certs correctly (see Diagnosis section)

Note that a SSLHandshakeException means that the certificates hasn't been added correctly or you forgot to reboot the application.

Regards

Miguel Angel Soriano_d7zwnl

Hi Jack,

thanks for you answer. I have used SSLPoke y everything is ok.. I use a UCC certificate (is the same certificate for 3 applications). I have rebooted the machine..

I don`t know what can i do more

Jack Nolddor [Sweet Bananas]

Are you sure that your application is using the Java Runtine Enviroment located at C:\Program Files\Java\jre1.8.0_221 ?

If so:

Have you added the public part of the other application certificate OR the CA to the cacerts file located at C:\Program Files\Java\jre1.8.0_221\security\cacerts in both applications

I've supposed the certificate has been generated correctly but do you mind to try the HttpClientTest to check if there is any problem?

Regards

Miguel Angel Soriano_d7zwnl

Hi Jack,

First thanks so much for your help . I found the issue.. The problem was in the cacert.. Jira installed in windows use this path C:\Program Files\Atlassian\JIRA\jre\lib\security and I did the change in java_home (in my system was C:\Program Files\Java\jre1.8.0_221)

I have added the public part in the C:\Program Files\Atlassian\JIRA\jre\lib\security\cacert and everything is working.

It was my fault not say what operative system i had.

For detect the public part, i used this (https://support.cloudbees.com/hc/en-us/articles/217078498-PKIX-path-building-failed-error-message)

Thanks, I appreciate your help

Miguel Angel Soriano_d7zwnl

I have added the public part in the C:\Program Files\Atlassian\JIRA\jre\lib\security\cacert and everything is working.

It was my fault not say what operative system i had.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

bitbucket

jira-software

jira-software-server