SSLPeerUnverifiedException while connecting to marketplace.atlassian.com from Bamboo
Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.
Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Summary
While trying to connect to marketplace.atlassian.com via Bamboo UI , user receives javax.net.ssl.SSLPeerUnverifiedException certificate error.
Environment
8.0.3 and 8.1.2
Diagnosis
Certificate error can be seen in the Bamboo logs (atlassian-bamboo.log)
1
2
2022-03-30 11:04:38,959 WARN [http-nio-8085-exec-67] [CategoryCollectionResource] Failed to get categories
com.atlassian.marketplace.client.MpacException: javax.net.ssl.SSLPeerUnverifiedException: Certificate for <marketplace.atlassian.com> doesn't match any of the subject alternative names: [services.atlassian.com, *.services.atlassian.com]
Cause
This error occurs when the certificate for Atlassian Marketplace doesn’t match with the certificates present in key-store of Bamboo server.
Server Name Indication (SNI) is an extension to the Transport Layer Security (TLS) computer network protocol which allows a server to present one of multiple possible certificates on the same IP address and TCP port number and hence allows multiple secure (HTTPS) websites to be served by the same IP address without requiring all those sites to use the same certificate.
SNIExtension is not enabled and the TLS client protocol version is below version 1.2 which is preventing Bamboo server to communicate with marketplace.atlassian.com.
Solution
In order to solve this problem you must enable SNI Extension and TLSv1.2 for Bamboo:
1. Stop Bamboo.
2. Follow the steps inside the Configuring your system properties page (depending on your OS) and add the following Java properties to Bamboo:
* -Djsse.enableSNIExtension=true
* -Djdk.tls.client.protocols=TLSv1.2
3. Start Bamboo.
Was this helpful?