PKIX path building failed: (...) unable to find valid certification path to requested target

Question

We've recently moved our Confluence DC - Database to a new cluster.

Since the migration, our system is unable to connect with the statuspage server due to a certificate issue (it seems so).

The confluence error log shows:

(...)

caused by: javax.net.ssl.SSLHandshakeException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested targetat java.base/sun.security.ssl.Alert.createSSLException(Unknown Source)caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested targetat java.base/sun.security.validator.PKIXValidator.doBuild(Unknown Source)caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested targetat java.base/sun.security.provider.certpath.SunCertPathBuilder.build(Unknown Source)But- however - where can I find a valid certificate I can import in the keystore (if that's the solution)?Thanks for your reply!
M

Kennedy Ibeh · Answer

Hi @Manuel Sollbach

How did you generate and apply the valid certificate?

Manuel Sollbach · Answer

Hi Rafa,

thanks, after pushing a valid certificate in the cacerts file the service is running smoothly again.

Best,
Manuel

Rafael Meira_bepskb · Answer

Hello @Manuel Sollbach

The "PKIX path building failed" error typically means that the certificate chain of trust can't be validated. This usually happens when the certificate of the server you are trying to connect to is not trusted by your Java environment.

I would strongly recommend you create a support ticket with our team since we would need to troubleshoot it further, and maybe connect another team to it.

Please follow the steps below to create a support ticket:

https://support.atlassian.com/contact/#/

Best,
Rafa