Script Runner "View in Issue Navigator" error

Loredana May 23, 2013

Hi,

When I click the link "View in Issue Navigator" next to the active or planned Sprint or next to the Backlog I get this error:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Here it says that if you run JIRA behind https with a client certificate:

"Then you need to import the server certificate into the java keystore for the JVM which runs JIRA"

https://jamieechlin.atlassian.net/wiki/display/GRV/Scripted+JQL+Functions#ScriptedJQLFunctions-inSprint%28boardname,sprintname%29

Our JIRA is on https and we've imported the SSL certificate into the java keystore, we were able to connect JIRA with Confluence by giving both the same Certificate. I don't understand what other certificate needs to be imported and where... I've even installed the JIRA SSL Plugin, but I don't know which certificate to enter there.

Here it says that:

"The problem that you are facing could be caused by the fact that JIRA does not contain the SSL certificate (public key) from the services it trying to connect."

https://answers.atlassian.com/questions/157384/view-in-issue-navigator-link-is-not-working-gh-6-1-6-scriptrunner-2-1-3

What public key is JIRA missing?

I know that GreenHopper plans to bring this feature also (search for issues that are in future Sprints), but according to a comment in April, it's planned to arrive in 6 months or so...that's a long wait for us:

https://jira.atlassian.com/browse/GHS-5773

We need this feature soon and would appreciate your help a lot!

Versions:

JIRA Vs.5.2.6

Grrenhopper Vs.6.2.1

Script Runner Vs.2.1.3

Many thanks,

Loredana

1 answer

0 votes
C_ Faysal
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
May 23, 2013

Hi Loredana.

is confluence and jira on the same host?

just wondering cause you mentioned

were able to connect JIRA with Confluence by giving both the same Certificate.

if this is the case i think you need boths applications run on the same host or you own a wildcard certificate.

you may check your ssl config file the webserver uses.

there should be directives containg paths to certificate (and key)

maybe there is the issue

i remember recent problems with application links between jira and confluence.

it was an outdated selfsigned certfile

regards

Loredana May 26, 2013

Hi Faysal,

Yes, JIRA and Confluence are on the same host, that works fine. Maybe I didn't explain it well enough.

The issue is that this Script Runner Plugin gives this Error when I click "View in Issue Navigator" from Agile Board - Plan Mode:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

This error leads to advices like:

"The problem that you are facing could be caused by the fact that JIRA does not contain the SSL certificate (public key) from the services it trying to connect."

I don't understand why this plugin needs a certification since it's a plugin installed in JIRA and which certification does it need.

Many thanks for the support!

Loredana

C_ Faysal
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
May 26, 2013

hi Loredana,

i understood your explanation. i know where this "View in Issue Navigator" is located and i am wondering why you get an "sun.security.provider.certpath.SunCertPathBuilderException" too.

looks like the function calling your baseURL to get there from "outside" instead of accessing it internally inside the application.

what i did:

we use loadbalanced setup with a wildcard cert on the webserver.

jira and confluence are on one host as well.

i added a selfsigned certificate to JAVA keystore (i set up jira and confluence to use a centralized java instead of their own JRE for each application to avoid adding the cert twice)

still i got no clue why you can not access the issue navigator. maybe Jamie has an answer for this

Suggest an answer

Log in or Sign up to answer
TAGS
AUG Leaders

Atlassian Community Events