connect confluence to Jira over SSL

[Jason Hughes]

Hi

I have setup JIRA for SSL and that works fine. I have installed Confluence on a new server in the same subnet. I get the following error message -

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target"

my JIRA SSL cert is here - C:\Program Files\Atlassian\JIRA as per the SSL guide

 my Confluence cert is stored here -  C:\Users\Administrator\Documents\keystore.keystore

are these in the right place?

[Jason Hughes]

Hi 

I checked this and still no joy... I tried using Application Links as well and still the same error! 

Not sure what else to do now. 

Is there a definitive answer on where the keystores should be? I have mentioned that above and even when I asked the unhelpful support chap I got no answer  

[Brian]

Either Confluence cannot set up a trusted Connection to JIRA, JIRA cannot set up a trusted connection to Confluence, or both. The error basically means that one of the applications cannot find the cert of the other application in order to trust the connection. So you'll have to ensure that the Confluence cert is in JIRA's truststore, and that JIRA's cert is in Confluence's truststore. 

This KB has some instructions on how to do that: https://confluence.atlassian.com/display/JIRA/Connecting+to+SSL+services]

You can also use the SSLPoke tool to determine if your truststore has the right ceftificates. That tool is described in this KB: https://confluence.atlassian.com/display/JIRAKB/Unable+to+Connect+to+SSL+Services+due+to+PKIX+Path+Building+Failed+sun.security.provider.certpath.SunCertPathBuilderException

Hope this helps!

[Jason Hughes]

Yes I have and still the same error

[Julian Riedinger [Decadis AG]]

Have you added your cert to the keystore of the jre which JIRA is using?