Bamboo remote agent setup getting error as "Unable to find valid certification path to requested target"

Omprakash Thamsetty
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 9, 2015

Hi,

 

I am setting up Bamboo remote agent but its getting fail because of unable to find valid certification path to requested target. How and where I need to place the certificates to setup the bamboo remote agent?

 

Here is the error message

 

INFO   | jvm 1    | 2015/12/09 12:17:15 | javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Alerts.getSSLException(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.processLoop(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.process_record(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:535)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:403)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentContext.initFingerprint(AgentContext.java:118)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentContext.initServerSession(AgentContext.java:103)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentContext.run(AgentContext.java:94)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentBootstrap.run(AgentBootstrap.java:95)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentBootstrap.main(AgentBootstrap.java:41)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at java.lang.reflect.Method.invoke(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:240)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at java.lang.Thread.run(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 | Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.validator.Validator.validate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     ... 29 more

2 answers

1 accepted

0 votes
Answer accepted
Jobin Kuruvilla [Adaptavist]
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 9, 2015

Import the Bamboo server's public cert into the keychain used by the agent.

Similar process is explained at https://confluence.atlassian.com/display/KB/Unable+to+Connect+to+SSL+Services+due+to+PKIX+Path+Building+Failed

0 votes
Omprakash Thamsetty
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 9, 2015

 @Jobin Kuruvilla [Go2Group]

First step telling me to make sure imported the public certificate. Where I need to and how I can import? I have bamboo server certificate in my local laptop.

  • Make sure you have imported the public certificate of the target instance into the truststore according to the Connecting to SSL Services instructions.

Can you tell me know how I an do that?

 

Om 

Jobin Kuruvilla [Adaptavist]
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 9, 2015

Did you check the Connecting to SSL Services instructions?

Omprakash Thamsetty
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
December 10, 2015

Its worked after seeing the instruction at "Connecting to SSL Services". Thanks

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events