Secure IMAP Error - unable to find valid certification path to requested target

Question

Trying to add a secure IMAP server for Jira to cover incoming mail.  Every time I try and test the connection I get 'SunCertPathBuilderException: unable to find valid certification path to requested target'.

Any idea if this is fixable?

Jose Porcel · Answer

Hi,

We have the "in house" version of Jira, the certificate is self-signed (from Plesk) but there is no settings in the interface to override the SSL check. In osTicket, I have not problem at all using POP3+SSL against the same server.

Is there a simple way to disable the checks ?

Regards

Andy Nguyen · Answer

Hi,

If that's the case, the certificate of the mail server may not be trusted by Atlassian:

* This problem comes from a certificate that is either self-signed (a CA did not sign it) or the certificate chain does not exist within the Java keystore. Subsequently, JIRA doesn't trust the certificate and fails to connect to the application.
* It is not possible to install intermediate certificates in OnDemand. The potential impact might be that you will run into problems when adding secure POP/IMAP mail servers that have certificates signed by non-root CAs.
* The workaround is to obtain a certificate signed by a trusted root Certification Authority (CA). The full list is here.

Please double check on this.

Regards,

Andy

state51 orders · Answer

This is JIRA ondemand, it's hosted by Atlassian.