• Type: Bug
• Resolution: Fixed
• Priority: Low
• Fix Version/s: 8.2.2, 9.0.0
• Affects Version/s: 8.0.4, 8.1.2
• Component/s: Agents, Docker
• Labels:

  None

[BAM-21594] Incorrect description for "bamboo.agent.ignoreServerCertName" property

Alexey Chystoprudov made changes - 06/May/2022 8:31 PM

Resolution		New: Fixed [ 1 ]
Status	Original: Waiting for Release [ 12075 ]	New: Closed [ 6 ]

Alexey Chystoprudov made changes - 06/May/2022 9:48 AM

Affects Version/s

Original: 8.0.6 [ 99296 ]

Alexey Chystoprudov made changes - 06/May/2022 9:48 AM

Status

Original: In Progress [ 3 ]

New: Waiting for Release [ 12075 ]

Alexey Chystoprudov made changes - 06/May/2022 8:57 AM

Fix Version/s		New: 9.0.0 [ 100790 ]
Fix Version/s		New: 8.2.2 [ 100690 ]

Alexey Chystoprudov made changes - 06/May/2022 8:57 AM

Description

Original: h3. Issue Summary When launching the _atlassian-bamboo-agent-installer_ through the bamboo-agent-base docker image, "bamboo.agent.ignoreServerCertName" is ignored. h3. Steps to Reproduce In the container, start a new agent instance pointing it to a different {_}bamboo.home{_}. The Bamboo server SSL certificate must be self-signed/private and not known to the container's Java truststore. {noformat} /opt/java/openjdk/bin/java -Dbamboo.home=/var/atlassian/application-data/bamboo-agent2 -Dbamboo.agent.ignoreServerCertName=true -jar /opt/atlassian/bamboo/atlassian-bamboo-agent-installer.jar https://bamboo80.osalva.net/agentServer -t 1be9a785bfdb42afbf40e81c88838de1641b511 {noformat} h3. Expected Results The agent should ignore the Bamboo server certificate and continue its bootstrap h3. Actual Results The agent fails with: {noformat} PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target {noformat} Tested on docker _latest_ and _8.0.4_ tags. h3. Workaround Currently, there is no known workaround for this behaviour. A workaround will be added here when available

New: h3. Issue Summary Description of "bamboo.agent.ignoreServerCertName" is incorrect. It doesn't disable SSL certificate verification but allows to ignore host name used during certificate issuing. h3. Steps to Reproduce Read description at Install remote agent page h3. Expected Results Property {{bamboo.agent.ignoreServerCertName}} is correctly explained h3. Actual Results It says property allows to accept self-signed SSL certificate h3. Workaround Currently, there is no known workaround for this behaviour. A workaround will be added here when available

Alexey Chystoprudov made changes - 06/May/2022 8:55 AM

Summary

Original: atlassian-bamboo-agent-installer.jar in bamboo-agent-base docker image ignores "bamboo.agent.ignoreServerCertName" property

New: Incorrect description for "bamboo.agent.ignoreServerCertName" property

Alexey Chystoprudov made changes - 04/May/2022 1:29 PM

Remote Link

New: This issue links to "+core+ Dogfooding › Test Git Branch Detection › BAM-21594_improve_hostname_verification_description (tardigrade-bamboo)" [ 638941 ]

Alexey Chystoprudov made changes - 28/Apr/2022 7:28 PM

Link

New: This issue duplicates BAM-16022 [ BAM-16022 ]

Alexey Chystoprudov made changes - 28/Apr/2022 12:23 PM

Status

Original: Short Term Backlog [ 12074 ]

New: In Progress [ 3 ]

Alexey Chystoprudov made changes - 28/Apr/2022 12:23 PM

Assignee

New: Alexey Chystoprudov [ achystoprudov ]

Load more older history items