Can SSL certificate for JIRA expire?

Hi all,

Our AD users lost access to JIRA. It happened just abruptly.

Because we a had a working connection JIRA <-> AD.

Long ago we tuned such integration through our home made certificate using "./keytool -import" and it worked.

Yesterday I found out that "" parameter set to "true" I changed it to "false", restarted JIRA but still no access for AD users. 


Caused by: org.springframework.transaction.CannotCreateTransactionException: Could not create DirContext instance for transaction; nested exception is org.springframework.ldap.CommunicationException: <server name>; nested exception is javax.naming.CommunicationException: <server name>:636 [Root exception is PKIX path building failed: unable to find valid certification path to requested target] 

So can SSL certificate expire?

And what else can be done to fix it?

Thank you. 

2 answers

1 accepted

1 vote
Accepted answer

Yes, SSL certificates expire.

You need to create a new one and import it to Jira, just as you did with the old one. 

David Currie Atlassian Team Jul 06, 2015

Also the certificates are stored in the trust store, which is typically cacerts located in a subdirectory the Java home directory. If you make any changes to Java, such as upgrading it, this can overwrite that trust store and you need to re-import the certs.

Better yet, import the CA certificate(s) that sign the LDAP server's certificate.

Thank you all, chaps

A newly generated certificate sorted that out. 

Suggest an answer

Log in or Sign up to answer
Community showcase

Scrum Roles Explained: the Do's and the Don'ts

Hello Community,  Today we are going to talk about the three Scrum Roles. There is the Development Team, the Scrum Master and the Product Owner. In my opinion these three are all really impo...

127 views 2 5
Read article

Atlassian User Groups

Connect with like-minded Atlassian users at free events near you!

Find a group

Connect with like-minded Atlassian users at free events near you!

Find my local user group

Unfortunately there are no AUG chapters near you at the moment.

Start an AUG

You're one step closer to meeting fellow Atlassian users at your local meet up. Learn more about AUGs

Groups near you