ApplicationLink from Jira To Bitbucket is working, Same link from Confluence To Bitbucket not.

Question

Hello, we configured our system (jira, confluence and bitbucket) from scheme http to scheme https (SSL-Security). We have connected Jira to Confluence and Bitbucket over here new https address and everything is working well. Now when is setup the binding in Confluence to Jira and Bitbucket, only Jira is working well. My bitbucket-link https://bitbucket.convis.lu is not working, because the message "The remote certificate can't be trusted". Please notice, that jira can connect to bitbucket over the same link. When i set the link via http://: is it working, but i don't want this. I can't figure out why jira can connect and confluence not. Do you can help me to solve this issue, please? Best regards Kai Hagedorn INFORMATIK / SERVICE INFORMATIQUE CONVIS s.c. 4, zone artisanale et commerciale L-9085 Ettelbruck Tel.: +352 26 81 20-355 Fax: +352 26 81 20-655 E-Mail: Kai.Hagedorn@convis.lu Website: www.convis.lu

Shannon S · Answer

Hi Jeff,

Keep in mind that each application can be configured with a different trust store location, so this could cause the issue you are seeing.

Another alternative would be that if they are running within a different JVM, or on a different server, it might not be configured to trust the certificate.

I'm happy to hear you resolve your issue at any rate, and glad the article helped you towards that resolution.

Take care!

Shannon

Jeff Stirn · Answer

Finally solved.

The problem was that jira and bitbucket used java under C:\Program Files\Java\
and confluence brings and use his own java installation under C:\Program Files\Atlassian\Confluence\jre.

Both JAVA-Installations has had its own cacerts (Trust-Store for CA-Certs).
After adding the missing certs in chain to the file
"C:\Program Files\Atlassian\Confluence\jre\lib\security\cacerts" too, confluence was able to connect to bitbucket.

But there is still one thing, i still couldn't understand:
Why was Confluence able to connect to Jira without the cert-chain in his trust-store?
It was the same wildcard-cert.

Jeff Stirn · Answer

A Part of that problem is solved now. Thank you.

In the java default cacerts file, was still one intermediate cert missing.

C:\Program Files\Java\jre1.8.0_151\bin>java SSLPoke bitbucket.convis.lu 443
Successfully connected

Now, i get no erros when i run

java SSLPoke bitbucket.convis.lu 443

but the origin problem still exist.