JIRA Gadget.common.error.500

JIRA Does Not Start after Configuring SSL Due to Unspecified TrustStore or Keystore Path

Unable to Connect to SSL Services due to PKIX Path Building Failed sun.security.provider.certpath.SunCertPathBuilderException

JIRA Does Not Start after Configuring SSL Due to Unspecified TrustStore or Keystore Path

Test using:

https://confluence.atlassian.com/kb/files/779355358/779355357/1/1441897666313/SSLPoke.class

$JAVA_HOME/bin/java SSLPoke jira.example.com 443

Download and import the certificate into the keystore.

wget https://letsencrypt.org/certs/lets-encrypt-x3-cross-signed.pem.txt
wget https://letsencrypt.org/certs/letsencryptauthorityx3.pem.txt

cp -a /opt/atlassian/jira/jre/lib/security/cacerts /opt/atlassian/jira/jre/lib/security/cacerts.orig

/opt/atlassian/jira/jre/bin/keytool -trustcacerts \
    -keystore /opt/atlassian/jira/jre/lib/security/cacerts  \
    -storepass changeit \
    -noprompt \
    -importcert \
    -alias lets-encrypt-x3-cross-signed \
    -file lets-encrypt-x3-cross-signed.pem.txt

Test

/opt/atlassian/jira/jre/bin/java SSLPoke jira.edgeler.net 443
Successfully connected
cp -a /opt/atlassian/confluence/jre/lib/security/cacerts /opt/atlassian/confluence/jre/lib/security/cacerts.orig

/opt/atlassian/confluence/jre/bin/keytool -trustcacerts \
    -keystore /opt/atlassian/confluence/jre/lib/security/cacerts  \
    -storepass changeit \
    -noprompt \
    -importcert \
    -alias lets-encrypt-x3-cross-signed \
    -file lets-encrypt-x3-cross-signed.pem.txt