Script Runner "View in Issue Navigator" error

[ALO]

Hi,

When I click the link "View in Issue Navigator" next to the active or planned Sprint or next to the Backlog I get this error:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

Here it says that if you run JIRA behind https with a client certificate:

"Then you need to import the server certificate into the java keystore for the JVM which runs JIRA"

https://jamieechlin.atlassian.net/wiki/display/GRV/Scripted+JQL+Functions#ScriptedJQLFunctions-inSprint%28boardname,sprintname%29

Our JIRA is on https and we've imported the SSL certificate into the java keystore, we were able to connect JIRA with Confluence by giving both the same Certificate. I don't understand what other certificate needs to be imported and where... I've even installed the JIRA SSL Plugin, but I don't know which certificate to enter there.

Here it says that:

"The problem that you are facing could be caused by the fact that JIRA does not contain the SSL certificate (public key) from the services it trying to connect."

https://answers.atlassian.com/questions/157384/view-in-issue-navigator-link-is-not-working-gh-6-1-6-scriptrunner-2-1-3

What public key is JIRA missing?

I know that GreenHopper plans to bring this feature also (search for issues that are in future Sprints), but according to a comment in April, it's planned to arrive in 6 months or so...that's a long wait for us:

https://jira.atlassian.com/browse/GHS-5773

We need this feature soon and would appreciate your help a lot!

Versions:

JIRA Vs.5.2.6

Grrenhopper Vs.6.2.1

Script Runner Vs.2.1.3

Many thanks,

Loredana

[C_ Faysal]

Hi Loredana.

is confluence and jira on the same host?

just wondering cause you mentioned

were able to connect JIRA with Confluence by giving both the same Certificate.

if this is the case i think you need boths applications run on the same host or you own a wildcard certificate.

you may check your ssl config file the webserver uses.

there should be directives containg paths to certificate (and key)

maybe there is the issue

i remember recent problems with application links between jira and confluence.

it was an outdated selfsigned certfile

regards

[ALO]

Hi Faysal,

Yes, JIRA and Confluence are on the same host, that works fine. Maybe I didn't explain it well enough.

The issue is that this Script Runner Plugin gives this Error when I click "View in Issue Navigator" from Agile Board - Plan Mode:

sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

This error leads to advices like:

"The problem that you are facing could be caused by the fact that JIRA does not contain the SSL certificate (public key) from the services it trying to connect."

I don't understand why this plugin needs a certification since it's a plugin installed in JIRA and which certification does it need.

Many thanks for the support!

Loredana

[C_ Faysal]

hi Loredana,

i understood your explanation. i know where this "View in Issue Navigator" is located and i am wondering why you get an "sun.security.provider.certpath.SunCertPathBuilderException" too.

looks like the function calling your baseURL to get there from "outside" instead of accessing it internally inside the application.

what i did:

we use loadbalanced setup with a wildcard cert on the webserver.

jira and confluence are on one host as well.

i added a selfsigned certificate to JAVA keystore (i set up jira and confluence to use a centralized java instead of their own JRE for each application to avoid adding the cert twice)

still i got no clue why you can not access the issue navigator. maybe Jamie has an answer for this