Bamboo remote agent setup getting error as "Unable to find valid certification path to requested target"

[Omprakash Thamsetty]

Hi,

I am setting up Bamboo remote agent but its getting fail because of unable to find valid certification path to requested target. How and where I need to place the certificates to setup the bamboo remote agent?

Here is the error message

INFO   | jvm 1    | 2015/12/09 12:17:15 | javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Alerts.getSSLException(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.fatalSE(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.processLoop(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.Handshaker.process_record(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:535)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:403)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentContext.initFingerprint(AgentContext.java:118)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentContext.initServerSession(AgentContext.java:103)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentContext.run(AgentContext.java:94)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentBootstrap.run(AgentBootstrap.java:95)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at com.atlassian.bamboo.agent.bootstrap.AgentBootstrap.main(AgentBootstrap.java:41)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at java.lang.reflect.Method.invoke(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:240)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at java.lang.Thread.run(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 | Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.validator.PKIXValidator.doBuild(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.validator.Validator.validate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)
INFO   | jvm 1    | 2015/12/09 12:17:15 |     ... 29 more

[Jobin Kuruvilla [Adaptavist] · Accepted solution]

Import the Bamboo server's public cert into the keychain used by the agent.

Similar process is explained at https://confluence.atlassian.com/display/KB/Unable+to+Connect+to+SSL+Services+due+to+PKIX+Path+Building+Failed

[Omprakash Thamsetty]

 @Jobin Kuruvilla [Go2Group]

First step telling me to make sure imported the public certificate. Where I need to and how I can import? I have bamboo server certificate in my local laptop.

• Make sure you have imported the public certificate of the target instance into the truststore according to the Connecting to SSL Services instructions.

Can you tell me know how I an do that?

Om 

[Jobin Kuruvilla [Adaptavist]]

Did you check the Connecting to SSL Services instructions?

[Omprakash Thamsetty]

Its worked after seeing the instruction at "Connecting to SSL Services". Thanks