Bitbucket Cloud Pipeline Cache Failure on Windows Runners - CertificateException
Platform Notice: Cloud Only - This article only applies to Atlassian products on the cloud platform.
Summary
For Windows runners, the pipeline cache fails with the below java exception:
1
2
The connection observed an error
java.security.cert.CertificateException: No subject alternative DNS name matching api.atlassian.com foundDiagnosis
Windows runners logs can be referred to see the actual error (`<runner_working_directory>/<runnerUuid>/runner.log`)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
Updating step progress to DOWNLOADING_CACHES.
[264d4e7d, L:/10.150.32.50:56872 - R:api.atlassian.com/185.166.143.31:443] The connection observed an error
java.security.cert.CertificateException: No subject alternative DNS name matching api.atlassian.com found.
at java.base/sun.security.util.HostnameChecker.matchDNS(HostnameChecker.java:207)
at java.base/sun.security.util.HostnameChecker.match(HostnameChecker.java:98)
at java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:459)
at java.base/sun.security.ssl.X509TrustManagerImpl.checkIdentity(X509TrustManagerImpl.java:434)
at java.base/sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:291)
at java.base/sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:141)
at java.base/sun.security.ssl.CertificateMessage$T13CertificateConsumer.checkServerCerts(CertificateMessage.java:1307)
... 31 common frames omitted
Wrapped by: javax.net.ssl.SSLHandshakeException: No subject alternative DNS name matching api.atlassian.com found.
at java.base/sun.security.ssl.Alert.createSSLException(Alert.java:128)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:321)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:264)
at java.base/sun.security.ssl.TransportContext.fatal(TransportContext.java:259)Cause
This was related to the Possible race condition in TLS 1.3 session resumption bug.
Solution
Download the latest version of JDK or at least the OpenJDK version "11.0.15" 2022-04-19.
For new runners, you can follow the steps for setting up the windows runner.
For existing runners, after upgrading the JDK please perform a restart of Windows runners.
Updated on March 17, 2025
Was this helpful?
Still need help?
The Atlassian Community is here for you.