Synchronization with JIRA failing over HTTPS

Products

• ConnectAll On-Prem

Issue/Introduction

We have JIRA integration over HTTPS and which fails during synchronization. We validated the connection and it connects fine without any issue, however the same fail when trying to synchronize the record.

ERROR PKIX Path building failed 
sun.security.provider.certpath.SunCertPathBuilderException

Environment

Component: ConnectAll

Version: 2.11.X

Cause

The issue is related to environmental configuration, where the certificate required to establish connection to JIRA was not imported in JAVA_INSTALL_PATH\lib\security\cacerts being referenced by Mule Service.

Resolution

Configure the Mule Java to point to location in whose lib/security/cacerts the JIRA certificates are imported.

1: Copy the path to cacert from ConnectAll > Settings > SSL Import. Example JAVA_INSTALL_PATH\lib\security\cacerts

2: Open the wrapper.conf file of Mule i.e. MULE_INSTALL_DIR/conf/wrapper.conf

3: Create a back up of the wrapper.conf file

4: Update the below configuration to point to JAVA PATH copied in step 1, replacing lib\security\cacerts by bin\java

# Java Application
wrapper.java.command=JAVA_INSTALL_PATH\bin\java

5: Configure the TLS protocol by setting, JVM options adding below line in wrapper.conf next to other wrapper.java.additional. 

Note: The wrapper.java.additional.<NUM> follow a pattern so look for the last number in file for example if the last identified match have a number of 19 i.e. wrapper.java.additional.19, insert the configuration with 20 as below.

wrapper.java.additional.20=-Dhttps.protocols=TLSv1.1,TLSv1.2

6: Restart the Mule Service