Plugin updates via UPM fail in Jira server

お困りですか?

アトラシアン コミュニティをご利用ください。

コミュニティに質問

プラットフォームについて: サーバーと Data Center のみ。この記事は、サーバーおよび Data Center プラットフォームのアトラシアン製品にのみ適用されます。

問題

In some cases, plugin updates via UPM fails and the following appears in the atlassian-jira.log

2017-10-17 15:32:19,181 UpmAsynchronousTaskManager:thread-3 ERROR admin 932x75x3 1b3k4i7 <IPaddress> /rest/plugins/1.0/ [c.a.u.c.r.resources.install.InstallFromUriTask] 
Error downloading plugin from https://marketplace.atlassian.com/download/plugins/com.atlassian.support.stp/version/3010042
2017-10-17 15:32:19,201 UpmAsynchronousTaskManager:thread-4 ERROR admin 932x79x2 1b3k4i7 <IPaddress> /rest/plugins/1.0/ [c.a.u.c.r.resources.install.InstallFromUriTask] 
Error downloading plugin from https://marketplace.atlassian.com/download/plugins/com.atlassian.support.stp/version/3010042

または 

javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

または 

2020-04-03 15:05:29,632-0700 http-nio-8080-exec-30 WARN admin 905x5842x1 1b3k4i7 <IPaddress>,<IPaddress>,<IPaddress> /plugins/servlet/upm
 [c.a.upm.pac.PacClientImpl] Error when querying application info from MPAC: com.atlassian.marketplace.client.MpacException:
 javax.net.ssl.SSLPeerUnverifiedException: Certificate for <marketplace.atlassian.com> doesn't match any of the subject alternative names:
 [*.services.atlassian.com, services.atlassian.com]

または

Error when querying application info from MPAC: com.atlassian.marketplace.client.MpacException: javax.net.ssl.SSLException: hostname in certificate didn't match: <marketplace.atlassian.com> != <*.services.atlassian.com> OR <*.services.atlassian.com> OR <services.atlassian.com>
(info) These are just some scenarios and the solutions defined below are specifically for them.


診断

環境

  • JIRA 6.x and 7.x

診断ステップ

  • Check if you have added the -Djsse.enableSNIExtension=false parameter in setenv file (via $JIRA-INSTALL/bin)
  • Check if you have added a version of TLS protocol lower than TLSv1.2 which is the default for JDK8

原因

The following JVM arguments is being applied to the JIRA instance

  • -Djsse.enableSNIExtension=false
  • -Djdk.tls.client.protocols=TLSv1
  • -Djdk.tls.client.protocols=TLSv1.1

ソリューション

Remove -Djsse.enableSNIExtension=false and TLS protocol parameters lower than v1.2 via JIRA startup options, and restart the application.


最終更新日 2022 年 11 月 8 日

この内容はお役に立ちましたか?

はい
いいえ
この記事についてのフィードバックを送信する
Powered by Confluence and Scroll Viewport.