Confluence cant connect to atlassian marketplace with private SSL Certificate installed

Jeff Gerace November 1, 2018

My organization requires a custom private root CA certificate for all web access.  I've followed the instructions in https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html , and I've successfully imported not only my organization's private SSL certificate, but also the certificate from "marketplace.atlassian.com" and "marketplace-cdn.atlassian.com" as per https://confluence.atlassian.com/upm/problems-connecting-to-the-atlassian-marketplace-273875718.html.  When I check JVM to see what my root CA's are using "echo 'changeit' | keytool -list -v -keystore $(find $JAVA_HOME -name cacerts) | grep 'Owner:'", I can see my organization's certificate, and the general atlassian certificate (Owner: CN=*.atlassian.io).  I've restarted my server, and checked to make sure I can access the server using lynx from the command line, as well as simply ping the marketplace.  Unfortunately I still get the error "the Atlassian server marketplace is not reachable..."  from the Manage Apps page.  I'm stumped as to what else I need to do here.   We have lots of other servers with the same certificate requirement, though most are Windows based.  My installation is Centos 7.5.1804 with jre 1.8.0.191.  Confluence is 6.12.1, Postgre DB.  This is a fresh install.  Can someone help push me in the right direction?

1 answer

1 accepted

0 votes
Answer accepted
Jeff Gerace November 2, 2018

I found the answer.  I was updating the incorrect cacerts file.  The correct file to update was /opt/atlassian/confluence/jre/lib/security/cacerts.  

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events