Problem Definition

After generating a new Bamboo ActiveMQ broker certificate you must access the <bamboo-agent-home>/configuration folder of each agent that has been previously approved to remove the jmsclient.ks and jmsclient.ts files and restart the agent to re-establish the connection to Bamboo. If you simply generate a new Bamboo ActiveMQ broker certificate and don't remove the files aforementioned the agent will fail to start up with the following errors:

PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed

Suggested Solution

It would be great if Bamboo could automatically identify agents that have been previously approved but don't have the new certificate yet in order to generate new key and trust stores without manual intervention.