Application Links error after updating

[luciano_carlomagno_neuralsoft_com]

I have this infra:

Jira, Bitbucket and Bamboo in http, securing with apache using SSL.

After updating Bamboo from 6.8.1 to 6.10 Im not being able to link other Atlassian apps, when i enter the URL from jira or bitbucket, a warning says 'No response was received from the URL you entered - it may not be valid'. But on the other hand, when i did the same job in the other app it did well, but says that is failing the response from bamboo app.

I entered in the virtual machine where bamboo is installed and i do:

ping to jira host - OK

ping to jira's url - OK

And after analizing logs when i tried to add the app link to another app i am seeing this errors:

"2019-10-30 08:31:49,868 ERROR [http-nio-8085-exec-1] [CreateApplicationLinkUIResource] ManifestNotFoundException thrown while retrieving manifest
com.atlassian.applinks.spi.manifest.ManifestNotFoundException: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty
at com.atlassian.applinks.core.manifest.AppLinksManifestDownloader.doDownload(AppLinksManifestDownloader.java:207)
at com.atlassian.applinks.core.manifest.AppLinksManifestDownloader.access$000(AppLinksManifestDownloader.java:52)

..."

what is happening??

[Alexis Robert · Accepted solution]

Hi @luciano_carlomagno_neuralsoft_com , 

from the error you're getting, I think this kb is exactly talking about your issue : https://confluence.atlassian.com/kb/application-link-not-working-due-to-manifestnotfoundexception-393904879.html

Basically, there's a network issue between the 2 instances. But it could also be something else ... what are your other apps versions ? 

[luciano_carlomagno_neuralsoft_com]

Hi, thanks for your reply.

There is no network issue, ive already tried this 

 curl -H "Accept: application/json" http://potatobake:8090/rest/applinks/1.0/manifest -v

 and the awnser was good.

The ping is good, telnet is good, everything on network is good.

And in version 6.8 works OK connecting to both apps, bitbucket and jira, but now it isnt working.

[Alexis Robert]

you said both applications are running with Apache using SSL, but I can see that you used http and not https in your curl test. Can you confirm if you're using http or https ? 

[luciano_carlomagno_neuralsoft_com]

i only copy the example of that page, i enter the correct addres with https.

Im using ssl on apache2 redirecting to atlassian apps on http; all apps works fine, excepting bamboo that i cant link it

[Alexis Robert]

When I've had issues like this, I can fix it by creating a specific connector for that Application Link that will bypass the proxy, as described here : https://confluence.atlassian.com/kb/how-to-bypass-a-reverse-proxy-or-ssl-in-application-links-719095724.html.

If you do need SSL between application links, I would suggest checking that your bamboo instance JVM has your root certificate in its truststore : https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html

Let me know if this helps, 

--Alexis

[luciano_carlomagno_neuralsoft_com]

Thanks, but, when i tried to import the crt file it asks me for a password. Then i have to configure that password in server xml? where/how..?

[Alexis Robert]

Hi @luciano_carlomagno_neuralsoft_com , 

the default password is "changeit" : 

1. Import the certificate:

   <JAVA_HOME>/bin/keytool -import -alias <server_name> -keystore <JAVA_HOME>/jre/lib/security/cacerts -file public.crt

   Then enter the password if prompted (the default is changeit).

[luciano_carlomagno_neuralsoft_com]

Oka thanks, after doing that i have to change server.xml too?

[Alexis Robert]

No need to change server.xml, you can restart the application and try again setting up the Application Link !

[luciano_carlomagno_neuralsoft_com]

Alexis! thanks very much for your help! i could solved it.

I add the crt file like you told me, i add a connector to port 8443, and finally i add 

-Djavax.net.ssl.trustStore=$JAVA_HOME/jre/lib/security/cacerts

on setenv.sh

Finally it works!!