Hostname api-private.atlassian.com not verified
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
Problem
Unable to execute the migration plan (Server to Cloud) using the Migration Tool.
The following appears in the atlassian-confluence.log
1
2
3
4
5
6
2019-03-18 09:41:29,669 ERROR [Caesium-1-4] [agent.service.stepexecutor.ProgressTracker] error Step failed, message: An unexpected error occurred during step: Migrating attachments. Error: An IO exception occurred when communicating with a downstream service
com.atlassian.migration.agent.okhttp.IOHttpException: An IO exception occurred when communicating with a downstream service
Caused by: javax.net.ssl.SSLPeerUnverifiedException: Hostname api-private.atlassian.com not verified:
certificate: sha256/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
DN: CN=*.atlassian.net, O="Atlassian Network Services, Inc.", L=San Francisco, ST=California, C=US
subjectAltNames: [*.atlassian.net, atlassian.net]Diagnosis
Diagnostic Steps
Check in the Confluence JVM parameters if the following has been configured:
1
-Djsse.enableSNIExtension=falseCause
Setting the parameter -Djsse.enableSNIExtension=false means when you connect to a virtual server (which means there are many web servers on one IP address) then it stops the translation of IP address to the domain name. Basically, it stops just about every connection from working.
Solution
Resolution
Shutdown Confluence
Remove the following parameter from Confluence JVM settings:
1
-Djsse.enableSNIExtension=falseStart Confluence
Was this helpful?