Uploaded image for project: 'Jira Platform Cloud'
  1. Jira Platform Cloud
  2. JRACLOUD-76343

Cloud products are not trusting Certificates issued by Sectigo

      Issue Summary

      Our Cloud products are not trusting server certificates issued by Sectigo for application links.

      Sectigo is a privately held company that offers SSL certificate and computer security products. It was previously known as Comodo and Comodo CA but has since been sold to new owners and changed its name to Sectigo on November 1st, 2018.

      Steps to Reproduce

      1. Try to create an applink with a server instance that uses a certificate issued by Sectigo.

      Expected Results

      It should trust the certificate.

      Actual Results

      The following error message is shown:

      The remote certificate can't be trusted

      Server JIRA may be using a self-signed SSL certificate or a certificate that was issued by a certificate authority that isn't known locally.

      Notes

      Certificates from Comodo are accepted, as per https://docs.oracle.com/javase/6/docs/technotes/tools/solaris/keytool.html#cacerts

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

            [JRACLOUD-76343] Cloud products are not trusting Certificates issued by Sectigo

            We encountered a problem setting up application links (Jira Server - Confluence Cloud) and discovered it was due to our SSL certificate not including the full path of certificates.
            Some discussion about this here - after sorting that our server can connect to Atlassian Cloud ok.
            https://community.atlassian.com/t5/Jira-Software-questions/Jira-server-do-not-send-intermediate-certificate-So-it-fails-www/qaq-p/1794808

            Dwight Holman added a comment - We encountered a problem setting up application links (Jira Server - Confluence Cloud) and discovered it was due to our SSL certificate not including the full path of certificates. Some discussion about this here - after sorting that our server can connect to Atlassian Cloud ok. https://community.atlassian.com/t5/Jira-Software-questions/Jira-server-do-not-send-intermediate-certificate-So-it-fails-www/qaq-p/1794808

            John P added a comment -

            A client from Sectigo reached out on https://getsupport.atlassian.com/browse/CA-1350182

            John P added a comment - A client from Sectigo reached out on https://getsupport.atlassian.com/browse/CA-1350182

            Hello, can someone please confirm if the same issue persists when authenticating an "Email Request" (under Project Settings) or an Incoming Mail Server (System Settings)

             

            I continuously get the error:

            Unfortunately Jira couldn't connect to the mail server. Here is what the mail server said: "unable to find valid certification path to requested target"

             

            The certificate to our exchange server is hosted by Sectigo

             

            Any advice would be greatly appreciated.

            Paolo Taffari added a comment - Hello, can someone please confirm if the same issue persists when authenticating an "Email Request" (under Project Settings) or an Incoming Mail Server (System Settings)   I continuously get the error: Unfortunately Jira couldn't connect to the mail server. Here is what the mail server said: "unable to find valid certification path to requested target"   The certificate to our exchange server is hosted by Sectigo   Any advice would be greatly appreciated.

            Espen Halsaa Albrektsen added a comment - - edited

            Same here. Seems a lot of hazzle if we are forced to get a new cert...

            Espen Halsaa Albrektsen added a comment - - edited Same here. Seems a lot of hazzle if we are forced to get a new cert...

            Any Updates on this one? We are also affected now after our old certificate ran out.

            Sandro Herrmann [Communardo] added a comment - Any Updates on this one? We are also affected now after our old certificate ran out.

            gbero added a comment -

            Any news about this ? We're affected by the same issue.

             

            gbero added a comment - Any news about this ? We're affected by the same issue.  

            Vincent Chin (Inactive) added a comment - https://getsupport.atlassian.com/browse/PSCLOUD-30904

              b31c0bd26111 Matthew Law (Inactive)
              gtworkowski Guilherme T (Inactive)
              Affected customers:
              15 This affects my team
              Watchers:
              35 Start watching this issue

                Created:
                Updated:
                Resolved: