connect confluence to Jira over SSL

Question

Hi

I have setup JIRA for SSL and that works fine. I have installed Confluence on a new server in the same subnet. I get the following error message -

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

my JIRA SSL cert is here - C:\Program Files\Atlassian\JIRA as per the SSL guide

my Confluence cert is stored here -  C:\Users\Administrator\Documents\keystore.keystore

are these in the right place?

Jason Hughes · Answer

Hi

I checked this and still no joy... I tried using Application Links as well and still the same error!

Not sure what else to do now.

Is there a definitive answer on where the keystores should be? I have mentioned that above and even when I asked the unhelpful support chap I got no answer

Brian_10h0lq · Answer

Either Confluence cannot set up a trusted Connection to JIRA, JIRA cannot set up a trusted connection to Confluence, or both. The error basically means that one of the applications cannot find the cert of the other application in order to trust the connection. So you'll have to ensure that the Confluence cert is in JIRA's truststore, and that JIRA's cert is in Confluence's truststore.

This KB has some instructions on how to do that: https://confluence.atlassian.com/display/JIRA/Connecting+to+SSL+services]

You can also use the SSLPoke tool to determine if your truststore has the right ceftificates. That tool is described in this KB: https://confluence.atlassian.com/display/JIRAKB/Unable+to+Connect+to+SSL+Services+due+to+PKIX+Path+Building+Failed+sun.security.provider.certpath.SunCertPathBuilderException

Hope this helps!

Jason Hughes · Answer

Yes I have and still the same error