get SSL exception when i hits api of JIRA cause of java version change

Question

SSL HANDSHAKE FAILURE EXCEPTION

we are moving from java version "1.8.0_66"
Java(TM) SE Runtime Environment (build 1.8.0_66-b17)
Java HotSpot(TM) 64-Bit Server VM (build 25.66-b17, mixed mode) to openjdk version "1.8.0_292"
OpenJDK Runtime Environment (Zulu 8.54.0.21-CA-linux64) (build 1.8.0_292-b10)
OpenJDK 64-Bit Server VM (Zulu 8.54.0.21-CA-linux64) (build 25.292-b10, mixed mode). Now we face issue on SSL handshake_failure when making request for get access token from JIRA.

when i hits api of JIRA for get a access token and refresh token, i will get error like this

javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at sun.security.ssl.Alert.createSSLException(Alert.java:131)
at sun.security.ssl.Alert.createSSLException(Alert.java:117)
at sun.security.ssl.TransportContext.fatal(TransportContext.java:335)
at sun.security.ssl.Alert$AlertConsumer.consume(Alert.java:293)
at sun.security.ssl.TransportContext.dispatch(TransportContext.java:185)
at sun.security.ssl.SSLTransport.decode(SSLTransport.java:156)
at sun.security.ssl.SSLSocketImpl.decode(SSLSocketImpl.java:1409)
at sun.security.ssl.SSLSocketImpl.readHandshakeRecord(SSLSocketImpl.java:1315)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:439)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:410)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.createLayeredSocket(SSLConnectionSocketFactory.java:394)
at org.apache.http.conn.ssl.SSLConnectionSocketFactory.connectSocket(SSLConnectionSocketFactory.java:353)
at org.apache.http.impl.conn.DefaultHttpClientConnectionOperator.connect(DefaultHttpClientConnectionOperator.java:134)
at org.apache.http.impl.conn.PoolingHttpClientConnectionManager.connect(PoolingHttpClientConnectionManager.java:353)
at org.apache.http.impl.execchain.MainClientExec.establishRoute(MainClientExec.java:380)
at org.apache.http.impl.execchain.MainClientExec.execute(MainClientExec.java:236)
at org.apache.http.impl.execchain.ProtocolExec.execute(ProtocolExec.java:184)
at org.apache.http.impl.execchain.RetryExec.execute(RetryExec.java:88)
at org.apache.http.impl.execchain.RedirectExec.execute(RedirectExec.java:110)
at org.apache.http.impl.client.InternalHttpClient.doExecute(InternalHttpClient.java:184)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:107)

Pavel Junek · Answer

Hi,

Ah, OK. So in this case I have no idea where the problem is because the SSL certificate of the Altassian Cloud service is issued by an official CA and should therefore be valid.

However, you can try looking in this thread.

Pavel

Sage AU · Answer

Thanks for your response.

I am using Jira software cloud. This issue faced while hits the api for get a access token and refresh token via java(1.8.292).

How to import ssl certificate in jre?

How to get or create proper SSl certificate?

Pavel Junek · Answer

Hi @Sage AU,

Welcome to Atlassian Community :)

According to the error message, I assume you have Jira Server or Jira Data Center (not Jira Cloud - hosted by Atlassian with the domain xxxxxyyyy.atlassian.net).

This problem arises when you use your own SSL certificate (not issued by an official CA authority). In this case, you must import a new SSL certificate into the Java TrustStore (JRE) that your Jira is currently using and restart the application.

* Running Jira applications over SSL or HTTPS 
* Jira server throws SSL handshake failure errors when behind a proxy 
* javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure 
* Unable to connect to SSL services due to "PKIX Path Building Failed" error

Pavel