Attempting to set up Confluence to use Crowd. Following these steps - https://confluence.atlassian.com/crowd/integrating-crowd-with-atlassian-confluence-198573.html. Trying to test my connection and get this error - Connection test failed. Response from the server:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
Trying to find a log file with more info, but not finding one. Looked at both Confluence and Crowd folders.
Any ideas of what/where to look?
It seems your are trying to connect crowd on HTTPS (i.e https://your-crowd-url). Please note that when connecting on https or SSL, it is expected that your SSL certificates should be loaded into Java's Keystore (Confluence's JAVA keystore). Please have your crowd's ssl certificates should be imported into Java keystore. Please take a look at the following atlassian docs for more info;
TL;DR: Check which cert is offered with by your Crowd:
openssl s_client -showcerts -connect crowd.yourdomain.com:443
I'll add to this topic as it's one of the first that I found via Google and I was fighting quite long time with the certs.
I copied root CA via Firefox to JAVA keystore, but I was still getting the error:
Connection test failed. Response from the server: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
I have CentOS 8 as an Apache HTTPS reverse proxy in front of Crowd. With the command above I realised that for some reason, the Apache offers default SSL cert configured in /etc/httpd/conf.d/ssl.conf and not the SSL cert that has been configured in Apache virtual host configuration for crowd.yourdomain.com.
All the browsers are using the certs configured in the Apache virtual host configuration, which made me quite confused as I thought that maybe some certs are cached in browser or something.
You can check which certs the server is offering via command line in Linux and Windows with the command above. Similar command is used also in this Atlassian documentation:
Hey there, folks! For most of us, the past six months- yes, you read that right- have been a journey. More people than ever before have pivoted to working remotely, and navigating being on-scre...
Connect with like-minded Atlassian users at free events near you!Find an event
Connect with like-minded Atlassian users at free events near you!
Unfortunately there are no Community Events near you at the moment.Host an event
You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events