要約

While trying to connect to marketplace.atlassian.com via Bamboo UI , user receives javax.net.ssl.SSLPeerUnverifiedException certificate error.

環境

8.0.3 と 8.1.2

診断

Certificate error can be seen in the Bamboo logs (atlassian-bamboo.log) 

2022-03-30 11:04:38,959 WARN [http-nio-8085-exec-67] [CategoryCollectionResource] Failed to get categories
com.atlassian.marketplace.client.MpacException: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <marketplace.atlassian.com> doesn't match any of the subject alternative names: [services.atlassian.com, *.services.atlassian.com]

原因

This error occurs when the certificate for Atlassian Marketplace doesn’t match with the certificates present in key-store of Bamboo server.

Server Name Indication (SNI) is an extension to the Transport Layer Security (TLS) computer network protocol which allows a server to present one of multiple possible certificates on the same IP address and TCP port number and hence allows multiple secure (HTTPS) websites  to be served by the same IP address without requiring all those sites to use the same certificate.
SNIExtension is not enabled and the TLS client protocol version is below version 1.2 which is preventing Bamboo server to communicate with marketplace.atlassian.com.

ソリューション

In order to solve this problem you must enable SNI Extension and TLSv1.2 for Bamboo:

1. Stop Bamboo.
2. Follow the steps inside the Configuring your system properties page (depending on your OS) and add the following Java properties to Bamboo:
      * -Djsse.enableSNIExtension=true
      * -Djdk.tls.client.protocols=TLSv1.2
3. Start Bamboo.