It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Unable to login to Confluence through Okta (SSLHandshakeException error) Edited

Hi, 

 

I am trying to setup Confluence behind load balancer in AWS and Okta. When I am trying to login via Okta, I am unable to do so. To be more specific, I am being stuck on refirect page from Okta to Confluence (image is attached). When I looked at logs in  /var/atlassian/application-data/confluence/logs/atlassian-confluence.log 

2017-07-24 02:44:12,709 WARN [http-nio-8090-exec-2] [internal.integration.jira.DefaultJiraService] communicateWithJira Problem communicating with JIRA: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
-- referer: https://wiki-stage.mydomain.com/ | url: /rest/highlighting/1.0/panel-items | traceId: f2da7474efe3185d | userName: user.name

 

We are running Active Directory and I imported its certificate into keystore. The only missing piece I could think of is try to point confluence to correct keystore in setenv.sh ( -Djavax.net.ssl.trustStore=<path_to_keystore> ).Did anyone have similar problems configuring Confluence with Okta?

Any help is appreciated. 

3 answers

Not sure what SSL problems has to do with Okta integration?

 

-Lars

Is does affect Okta. AD only allows port 636 which is encrypted, so this is where SSL cert from domain controller becomes crititcal.

Your cert needs to be imported to the java used by your application:

JAVA_HOME/jre/lib/security/cacaerts

-Lars

I have configured CATALINA_OPTS="-Djavax.net.ssl.trustStore=/opt/atlassian/confluence/jre/lib/security/cacerts" argument in setenv.sh 

What I am surpsised about is seeing an error related to Jira while I am configuring Confluence. 

If you are using self signed ssl certificates on both JIRA, and Confluence with application links, then you`ll need to import certificates to both applications.

 

-Lars

where you able to resolve this? experiencing the same issue.

Suggest an answer

Log in or Sign up to answer
TAGS
Community showcase
Published in Confluence

How To: get the most out of the new Confluence navigation and Home

Hi Community, Elaine again from Confluence Cloud Product Management. Most of you have used the new Confluence navigation and Home for some time by now. Not sure what changed or just want to lear...

307 views 2 9
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you