class javax.net.ssl.SSLException during connection to jira

[System Administrator]

I have an on-site install of Jira 7.0.11 which I need to update.  To get to 7.28 (the one with the most plugin compatibility) I'll need to clear the SSL error I'm getting.

Jira says Java doesn’t trust the SSL certificate I'm using, which was issued by GoDaddy.  I ran the test on https://confluence.atlassian.com/jirakb/health-check-jira-base-url-859447384.html and I get the error "PKIX path building failed" mentioned on https://confluence.atlassian.com/kb/unable-to-connect-to-ssl-services-due-to-pkix-path-building-failed-779355358.html which tells me I need to add a certificate.

The page didn't really make it clear to me how I do that so I decided to opt for the possibly simpler option of using the SSL for Jira plugin but when I try to use that I get the error in the title - class javax.net.ssl.SSLException during connection to jira and the file the plugin claims to have created isn't there.

The error message sounds like it's realted to the problem I'm having, so there's some consistency at least but I'm not sure how to proceed.

Any helpful suggestions gratefully received.

[System Administrator]

In my case the problem resolved itself after a couple of restarts of Jira.

I've done a couple of upgrades since these events and now I find that adding the SSL address of my Jira site (jira.contoso.com:443) in the Jira SSL plugin (Administration, Troubleshooting and Support, Configure SSL) resolves the problems - I have to restart Jira after I've done that.

[Platform]

Hi, thanks for your suggestion. Mine's not that simple i'm afraid. Tried all of that already! Working through it with support so sure I'll get there soon. 

[Platform]

Did you ever solve this?? I am having similar issues, a confluence and jira server set up identically. jira is fine, confluence throwing this error. 

PS ultimately I may be having a different issue. If you are still having this issue, another way to easily import the cert is to use the app "portecle" to modify the cacerts file in your java instance. Love that app, saved me many headaches dealing with java..

[josh]

I would recommend setting up an apache proxy with the certificate you got rather than using the cert directly in tomcat with keystores, etc. 

[System Administrator]

Since the only Apache I've seen is the one Jira installs to run itself on, I really have no idea how to do that.  Based on this https://confluence.atlassian.com/kb/proxying-atlassian-server-applications-with-apache-http-server-806032611.html it would seem that isn't supported though.