Confluence Server 6.13 or later throws an 'unable to find valid certification path' error when running with AdoptOpenJDK

お困りですか?

アトラシアン コミュニティをご利用ください。

コミュニティに質問

プラットフォームについて: Server および Data Center のみ。この記事は、Server および Data Center プラットフォームのアトラシアン製品にのみ適用されます。

Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Fisheye および Crucible は除く

問題

The following error appears when running Confluence Server or Data Center 6.13 or later with AdoptOpenJDK. Error can occur when Confluence attempts to connect to another web service, for example the Atlassian Marketplace, or when configuring an external user directory that is also hosted on AWS (on a different node). 

...
sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

This issue is commonly seen when Confluence is hosted on AWS, but could occur wherever your Confluence is hosted. 

原因

AdoptOpenJDK 1.8.0_181 is missing a number of CA root certificates, including the "Starfield Services Root Certificate Authority" root certificate, which is issued by Amazon.

回避策

As a workaround you can install the missing root certificates from the Amazon Trust Repository. 

First, check whether a Starfield Services Root Certificate Authority certificate is present:

echo 'changeit'|keytool -list -v -keystore $(find ${JAVA_HOME} -name cacerts)|grep 'Owner'|grep 'Star'

If the certificate is not present, you can install it using the following command:

wget https://www.amazontrust.com/repository/SFSRootCAG2.pem && keytool -trustcacerts -keystore $JAVA_HOME/jre/lib/security/cacerts -storepass changeit -alias Root -import -file SFSRootCAG2.pem && rm SFSRootCAG2.pem


ソリューション

We expect these certificates to be available again in a later AdoptOpenJDK version. See https://github.com/AdoptOpenJDK/openjdk-build/issues/676 for progress on this issue. 


Last modified on Mar 18, 2022

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する
Powered by Confluence and Scroll Viewport.