nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

LDAP SSL Failed

Ian Carson

Hi,

I am trying to connect to my ad.domain.com and whenever the JIRA server tries to connect it throws an error about the SSL. I have gone through the steps online and have tried the SSLPoke tool to see what is going wrong... I ran these two commands

/opt/atlassian/jira# $JAVA_HOME/bin/java SSLPoke ad.domain.com 443
Successfully connected
/opt/atlassian/jira# $JAVA_HOME/bin/java SSLPoke ad.domain.com 636
Successfully connected

And both connected without a problem. This is the error I get from JIRA...

Connection test failed. Response from the server:
ad.domain.com:636; nested exception is javax.naming.CommunicationException: ad.domain.com:636 [Root exception is javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target]

Accepted answers

All comments

Fabio Racobaldo _Catworkx_

Hi Ian,

did you try to add the certificate into java cacert? Here a guide that could help you https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html

Ciao,

Fabio

Ian Carson

Those are the instructions I followed exactly. That's where the SSLPoke came from. As you can see, they are coming as Successfully Connected.

Ian Carson

I followed those instructions already, the keystore has my ssl. I don't quite know why it still fails. I am unsure if the JIRA install has it's own java instance it's using?

Fabio Racobaldo _Catworkx_

If you are a JIRA Administrator, you can go to System-> System Info and find "java.home".

Based on this you will be sure that JIRA is using the jdk in which you need to install the correct cacert.

Hope this helps,

Fabio

Ian Carson

It's using a local install of java. How can I make JIRA use the system JAVA installation?

Ian Stuart

Did you ever get this resolved? I'm running into the same issue.

kamrulhussain

Same, were you able to get the issue resolved?

Alexander Pappert

@kamrulhussain @Ian Stuart

step 3 solved my Problem with SSL

https://confluence.atlassian.com/adminjiraserver0710/configuring-an-ssl-connection-to-active-directory-953144428.html

Ian Stuart

Thanks for responding! I tried this initially and it didn't work... I ended up moving our certs into a different directory, performing the above operation again, then rebooting. Then it worked.

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira

jira-software

jira-server

ssl

ldap