Jenkins (Docker Image) connecting to BitBucket Server

Question

Hi at all:-)

I have jenkins v2.60.3 running as container installed within a docker image.

Our Company has a Bitbucket-Server v5.16.0 installed (https://bitbucket....:8555) where i can access using git commands on terminal running within the jenkins container. This work without problems.

But when i configure the Bitbucket Server Integration Plugin within the jenkins settings (before i did create a bitbucket personal admin access token and be sure i give the correct credentials i use to login to bitbucket and the URL includes the Port) and press the test connection button i get an error:

"Connection failure, please try again"

The jenkins logs shows:

"

com.atlassian.bitbucket.jenkins.internal.http.HttpRequestExecutorImpl

Bitbucket - io exception
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
...
"

I guess this means a certificate problem....what can i do to solve this?

I have no certificate.

Login to bitbucket using git commands does work with config "git config --global http.sslVerify "false"".

Is there a similiar possibility available within "Bitbucket Server Integration"-PlugIn?

Many thanks in adavance for help.

Chris Blake_s8lmyz · Answer

We ran into the same issue building our new Jenkins server. The issue is that the Bitbucket server has a certificate, which means its traffic is encrypted (the https: in its URL). But by default your Linux server running Jenkins doesn't have the certificate authority's cert in its cacert.crt file to unencrypt it.

So I fixed it by obtaining the ca certificate files (.crt), transferring them to my home folder on the Linux server with WinSCP, then used the keytool to import them to the server's cacert file.  Finding the correct cacert file can take a little doing. Mine was in /etc/ssl/certs/java on Ubuntu with OpenJDK.  Then I rebooted the server.  The Jenkins to BitBucket test button now worked.

Dave Chevell · Answer

Hey @Claudio Roßner ,

You need to import Bitbucket's SSL certificate into the trust store of the JVM running Jenkins. It doesn't relate to which plugin you're using, it's Java itself seeing an invalid (self-signed, I assume) SSL certificate and rejecting it.

https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-error-779355358.html describes how to deal with this between Atlassian applications. For Jenkins, if you're running in Docker you should be able to follow similar steps.

Cheers

Dave