Unable to assign an item to a user, but it worked previously.

[Chris Welch]

We were doing our sprint planning yesterday and we were unable to assign tasks to a user. This developer has been in our system for 6+ months and we have been assigning work to them regularly. 

They are in the system under the admin console. In Jira when I search people, they do not appear. This person can get into jira and can even assign themselves to the task. NOTHING has changed on our end. This is cloud hosted. 

Any suggestions?

[Danilo Conrad · Accepted solution]

Hi Jocar,

The exception you have pasted is addressed by the article below:

• Unable to Connect to SSL Services due to PKIX Path Building Failed sun.security.provider.certpath.SunCertPathBuilderException

Could you please check if the steps provided in the document above help to resolve these errors?

Cheers,

Danilo

[jocar]

Hello Danilo,

I 'd like to try the method described in the link you provided, but I am stuck at step one: importing the certs into the java keystore. I went to this section:

If you're unable to install Portecle on the server or prefer the command line please see ourCommand Line Installation section below.

But it leads me to a n EMPTY section !?

Please, could you clarify how could I import the certs using the CLI? I am conecting to a remote server with no X System whatsoever.

[Danilo Conrad]

Hi Jocar,

That's rather strange - the section should not be empty and I was also able to browse it accessing the link below:

https://confluence.atlassian.com/display/JIRA/Connecting+to+SSL+services#ConnectingtoSSLservices-commandline

I have copied the commands provided in that section below for your convenience. Please make sure to replace the JAVA_HOME for JIRA's JAVA_HOME path.

Cheers,

Danilo

----

Command Line Installation

1. Fetch the certificate, replacing google.comwith the FQDN of the server JIRA is attempting to connect to:

$ openssl s_client -connect google.com:443 < /dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > public.crt

2. Import the certificate:

<JAVA_HOME>/keytool -import -alias <server_name> -keystore <JAVA_HOME>/lib/security/cacerts -file public.crt

[jocar]

Hi Danilo,

I tried the provided commands but now I am facing this error in the second step:

keytool error: java.io.IOException: Keystore was tampered with, or password was incorrect

Command I used:

/opt/atlassian/jira/jre/bin/keytool-import-aliasmyserver.com-keystore /opt/atlassian/jira/jre/lib/security/cacerts-file /etc/pki/tls/certs/myserver.com.crt

Basically I got a problem when the previous command asks me for a passwd that I have no set. Since I do not remember to have generated a keytore (maybe the JAVA bundled with JIRA ships wth one?), I tried creating a new one using the info I found in this atlassian site Running Jira over SSl:

keytool -genkey -alias myserver.com -keyalg RSA -keystore /opt/atlassian/jira/jre/bin/myserver.com.jks

The I tried to run again the import command but I got the same error.

Could you help me with this one, please?

[jocar]

Thank you very much. I followed those steps and so far no more SSLEngine errors :)