Unable to start macOS runner in Apple Silicon M3

[Roshan.Mathew]

Wanted to create a macOS self hosted runner. However runner start up shell script ends up in the following error. 

Machine - Apple Silicon M3

[2025-02-03 16:28:27,102] Runner version: 3.15.0

[2025-02-03 16:28:27,107] Runner runtime: macos-bash

[2025-02-03 16:28:27,316] Starting websocket listening to RUNNER_UPDATED events.

[2025-02-03 16:28:27,374] Updating runner status to "ONLINE" and checking for new steps assigned to the runner after 0 seconds and then every 30 seconds.

[2025-02-03 16:28:27,441] Updating runner state to "ONLINE".

[2025-02-03 16:28:27,840] [86ef64d8, L:/10.1.1.199:57656 - R:auth.atlassian.com/13.227.213.15:443] The connection observed an error

sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

at java.base/sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:148)

at java.base/sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:129)

at java.base/java.security.cert.CertPathBuilder.build(CertPathBuilder.java:297)

at java.base/sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:383)

... 36 common frames omitted

[Theodora Boudale · Accepted solution]

Hi @Roshan.Mathew and welcome to the community!

I've seen this issue occur on the following two occasions:

• The certificate of auth.atlassian.com is missing from the Java installation on the machine where the runner is running.
• The machine where the runner is running is behind a proxy and the proxy changes the certificate.

1. Is this Mac behind a proxy?

2. What output do you get if you run the following command from a terminal on this Mac?

openssl s_client -showcerts -servername auth.atlassian.com -connect auth.atlassian.com:443 </dev/null

This will print all the certificates sent by auth.atlassian.com.

3. What version of Java are you running on this Mac?

Kind regards,
Theodora

[Roshan.Mathew]

Thanks. Atlassian certifiate was missing the Key store. Runner started successfully after the certificate was imported to Java Key store

[Theodora Boudale]

That's good to hear, thank you for the update.

Please feel free to reach out if you ever need anything else!