class javax.net.ssl.SSLException during connection to jira

Question

I have an on-site install of Jira 7.0.11 which I need to update.  To get to 7.28 (the one with the most plugin compatibility) I'll need to clear the SSL error I'm getting.

Jira says Java doesn’t trust the SSL certificate I'm using, which was issued by GoDaddy.  I ran the test on https://confluence.atlassian.com/jirakb/health-check-jira-base-url-859447384.html and I get the error "PKIX path building failed" mentioned on https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html which tells me I need to add a certificate.

The page didn't really make it clear to me how I do that so I decided to opt for the possibly simpler option of using the SSL for Jira plugin but when I try to use that I get the error in the title - class javax.net.ssl.SSLException during connection to jira and the file the plugin claims to have created isn't there.

The error message sounds like it's realted to the problem I'm having, so there's some consistency at least but I'm not sure how to proceed.

Any helpful suggestions gratefully received.

Platform · Answer

Hi, thanks for your suggestion. Mine's not that simple i'm afraid. Tried all of that already! Working through it with support so sure I'll get there soon.

System Administrator_32s13s · Answer

In my case the problem resolved itself after a couple of restarts of Jira.

I've done a couple of upgrades since these events and now I find that adding the SSL address of my Jira site (jira.contoso.com:443) in the Jira SSL plugin (Administration, Troubleshooting and Support, Configure SSL) resolves the problems - I have to restart Jira after I've done that.

Platform · Answer

Did you ever solve this?? I am having similar issues, a confluence and jira server set up identically. jira is fine, confluence throwing this error.

PS ultimately I may be having a different issue. If you are still having this issue, another way to easily import the cert is to use the app "portecle" to modify the cacerts file in your java instance. Love that app, saved me many headaches dealing with java..