class javax.net.ssl.SSLException during connection to jira

I have an on-site install of Jira 7.0.11 which I need to update.  To get to 7.28 (the one with the most plugin compatibility) I'll need to clear the SSL error I'm getting.

Jira says Java doesn’t trust the SSL certificate I'm using, which was issued by GoDaddy.  I ran the test on https://confluence.atlassian.com/jirakb/health-check-jira-base-url-859447384.html and I get the error "PKIX path building failed" mentioned on https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html which tells me I need to add a certificate.

The page didn't really make it clear to me how I do that so I decided to opt for the possibly simpler option of using the SSL for Jira plugin but when I try to use that I get the error in the title - class javax.net.ssl.SSLException during connection to jira and the file the plugin claims to have created isn't there.

The error message sounds like it's realted to the problem I'm having, so there's some consistency at least but I'm not sure how to proceed.

Any helpful suggestions gratefully received.

 

3 answers

0 vote
Josh Steckler Community Champion Apr 12, 2017

I would recommend setting up an apache proxy with the certificate you got rather than using the cert directly in tomcat with keystores, etc. 

Since the only Apache I've seen is the one Jira installs to run itself on, I really have no idea how to do that.  Based on this https://confluence.atlassian.com/kb/proxying-atlassian-server-applications-with-apache-http-server-806032611.html it would seem that isn't supported though.

Did you ever solve this?? I am having similar issues, a confluence and jira server set up identically. jira is fine, confluence throwing this error. 

PS ultimately I may be having a different issue. If you are still having this issue, another way to easily import the cert is to use the app "portecle" to modify the cacerts file in your java instance. Love that app, saved me many headaches dealing with java..

In my case the problem resolved itself after a couple of restarts of Jira.

I've done a couple of upgrades since these events and now I find that adding the SSL address of my Jira site (jira.contoso.com:443) in the Jira SSL plugin (Administration, Troubleshooting and Support, Configure SSL) resolves the problems - I have to restart Jira after I've done that.

Hi, thanks for your suggestion. Mine's not that simple i'm afraid. Tried all of that already! Working through it with support so sure I'll get there soon. 

Suggest an answer

Log in or Sign up to answer
How to earn badges on the Atlassian Community

How to earn badges on the Atlassian Community

Badges are a great way to show off community activity, whether you’re a newbie or a Champion.

Learn more
Community showcase
Published yesterday in Jira Software

How large do you think Jira Software can grow?

Hi Atlassian Community! My name is Shana, and I’m on the Jira Software team. One of the many reasons this Community exists is to connect you to others on similar product journeys or with comparabl...

151 views 4 7
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you