javax.net.ssl.SSLHandshakeException

tip

Import the server certificate into your truststore.

You have a different solution? A short tip here would help you and many other users who saw this issue last week.

  • Verifying certificate using CApath | c - openssl
    via by Unknown author,
  • Humble Programmer
    via by Unknown author,
  • Trigger Snapshot Generation
    via by David Gutman,
  • h3. Summary After upgrading from JIRA 6.4.x / JIRA 7.0.10 to JIRA 7.1.0, gadgets title are showing as {{\_\_MSG_gadget.xxxxxxx}}, {{\_\_MSG_gadget.activity.}}, {{\_\_MSG_gadget.filter}} and so on. Please see the example below for how this appears in JIRA: !Selection_037.png|thumbnail! h3. Environment * JIRA 7.1.0 * Running JIRA over SSL/HTTPS h3. Diagnosis The following error appears in the {{atlassian-jira.log}}: {noformat} 2016-02-26 14:22:28,843 http-bio-8443-exec-11 ERROR admin 862x395x1 m32d6k 172.22.37.40 /secure/MyJiraHome.jspa [c.a.g.r.internal.http.HttpClientFetcher] Unable to retrieve response javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Alerts.java:192) {noformat} h3. Steps to Reproduce Configure JIRA to run over SSL/HTTPS using a self-signed certificate. h3. Expected Results Gadget title show correctly. h3. Actual Results Gadgets title keys are broken and appear as {{__MSG_gadget.xxxxxxx}} h3.Workaround - If you are experiencing issues with a self-signed certificates then follow the steps found [here|https://confluence.atlassian.com/kb/ssl-and-application-link-troubleshooting-guide-719095282.html#SSLandApplicationLinkTroubleshootingGuide-Importacertificateintoatruststore] to import self-signed certificates. - If you are experiencing issues related to JIRA not trusting an internal or unknown certificate authority then follow the steps found [here|https://confluence.atlassian.com/kb/ssl-and-application-link-troubleshooting-guide-719095282.html#SSLandApplicationLinkTroubleshootingGuide-Importacertificateintoatruststore] for importing a certificate into the trust store to import the certificate authority certificate. - If you are experiencing issues related to gadgets and SNI(Server Name Indication) you should watch [JRA-47568|https://jira.atlassian.com/browse/JRA-47568]. - If you are experiencing a different problem than those listed above please open a support ticket at https://support.atlassian.com. (i) Due to the number of workarounds involved, we've written a KB for this. Please review [How to fix gadget titles showing as __MSG_gadget.xxxxxxx|https://confluence.atlassian.com/display/JIRAKB/How+to+fix+gadget+titles+showing+as+__MSG_gadget] for the appropriate steps to take to workaround the issue.
    via by Azfar Masut [Atlassian],
    • javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

    Users with the same issue

    Unknown visitor1 times, last one,
    Unknown visitor1 times, last one,
    Unknown visitor1 times, last one,
    Unknown visitor2 times, last one,
    Unknown visitor1 times, last one,
    105 more bugmates