Integrating Jira and Confluence over SSL

[Ascania IT]

Hello,

I am trying to integrate JIRA and Confluence together. They both run over port 8443 on different servers.

https://sd.corp.ascania.ua:8443

https://cf.corp.ascania.ua:8443

I added certs SD and CF to sd.server And added certs SD and CF to cf.server. So when I use wget https://sd.corp.ascania.ua:8443 on CF.server it return correct index.html, and from SD.server wget https://cf.corp.ascania.ua:8443 return correct index.html.

When wizard setup Confluence (after clear install) connect to Jira I have error: connection refused...

[Ascania IT]

SSLPoke test from CF server

adminsd@jiraconf:~$ java SSLPoke cf.corp.ascania.ua 8443
Successfully connected
adminsd@jiraconf:~$ java SSLPoke sd.corp.ascania.ua 8443
Successfully connected

from SD server:

adminsd@sd:~$ java SSLPoke sd.corp.ascania.ua 8443
Successfully connected
adminsd@sd:~$ java SSLPoke cf.corp.ascania.ua 8443
Successfully connected

HTTPClientTest: from SD server (and the same answer from CF server):

java -jar httpclienttest-1.0.2.jar https://sd.corp.ascania.ua:8443
....
HTTPClient: Connection Successful to https://sd.corp.ascania.ua:8443



java -jar httpclienttest-1.0.2.jar https://cf.corp.ascania.ua:8443
...
HTTPClient: Connection Successful to https://cf.corp.ascania.ua:8443

 At SD server     ../log/atlassian-Jira.log error:

2020-09-03 05:07:43,801+0300 HealthCheck:thread-6 ERROR ServiceRunner [c.a.t.j.healthcheck.support.GadgetFeedUrlHealthCheck] An error occurred when performing the Gadget feed URL health>
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid c>
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

And on SD server have gadget.common.error.500

[Ascania IT]

on SD server added sertificate to store by command and gadget.common.error.500 disapear:

 sudo keytool -import -alias tomcat -file SD.cer -keystore /opt/atlassian/jira/jre/lib/security/cacerts

also added CF.cer, CA.cer and SubCA.cer

The same did on CF server.

But Integrating Jira and Confluence has error I wrote at description