Bamboo remote agent setup getting error as "Unable to find valid certification path to requested target"
Asked by Omprakash Thamsetty:

Hi,

I am setting up Bamboo remote agent but its getting fail because of unable to find valid certification path to requested target. How and where I need to place the certificates to setup the bamboo remote agent?

Here is the error message

INFO \| jvm 1 \| 2015/12/09 12:17:15 \| [javax.net](http://javax.net).ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.Alerts.getSSLException(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.SSLSocketImpl.fatal(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.Handshaker.fatalSE(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.Handshaker.fatalSE(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.ClientHandshaker.serverCertificate(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.ClientHandshaker.processMessage(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.Handshaker.processLoop(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.Handshaker.process_record(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.SSLSocketImpl.readRecord(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.SSLSocketImpl.performInitialHandshake(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.SSLSocketImpl.startHandshake(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:535)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.conn.ssl.SSLSocketFactory.connectSocket(SSLSocketFactory.java:403)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.conn.DefaultClientConnectionOperator.openConnection(DefaultClientConnectionOperator.java:177)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.conn.ManagedClientConnectionImpl.open(ManagedClientConnectionImpl.java:304)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.client.DefaultRequestDirector.tryConnect(DefaultRequestDirector.java:611)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.client.DefaultRequestDirector.execute(DefaultRequestDirector.java:446)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.client.AbstractHttpClient.doExecute(AbstractHttpClient.java:863)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:82)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:106)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.apache.http.impl.client.CloseableHttpClient.execute(CloseableHttpClient.java:57)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at com.atlassian.bamboo.agent.bootstrap.AgentContext.initFingerprint(AgentContext.java:118)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at com.atlassian.bamboo.agent.bootstrap.AgentContext.initServerSession(AgentContext.java:103)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at com.atlassian.bamboo.agent.bootstrap.AgentContext.run(AgentContext.java:94)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at com.atlassian.bamboo.agent.bootstrap.AgentBootstrap.run(AgentBootstrap.java:95)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at com.atlassian.bamboo.agent.bootstrap.AgentBootstrap.main(AgentBootstrap.java:41)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at java.lang.reflect.Method.invoke(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at org.tanukisoftware.wrapper.WrapperSimpleApp.run(WrapperSimpleApp.java:240)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at java.lang.Thread.run(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.validator.PKIXValidator.doBuild(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.validator.PKIXValidator.engineValidate(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.validator.Validator.validate(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.X509TrustManagerImpl.validate(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.X509TrustManagerImpl.checkTrusted(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(Unknown Source)  
INFO \| jvm 1 \| 2015/12/09 12:17:15 \| ... 29 more


Answers:
author: Jobin Kuruvilla [Adaptavist]
body: Import the Bamboo server's public cert into the keychain used by the agent.

Similar process is explained at <https://confluence.atlassian.com/display/KB/Unable+to+Connect+to+SSL+Services+due+to+PKIX+Path+Building+Failed>


author: Omprakash Thamsetty
body: @Jobin Kuruvilla \[Go2Group\]

First step telling me to make sure imported the public certificate. Where I need to and how I can import? I have bamboo server certificate in my local laptop.

* Make sure you have imported the public certificate of the target instance into the truststore according to the [Connecting to SSL Services](https://confluence.atlassian.com/display/JIRA/Connecting+to+SSL+services) instructions.

Can you tell me know how I an do that?

Om

comments: author: Jobin Kuruvilla [Adaptavist]
body: Did you check the Connecting to SSL Services instructions?


author: Omprakash Thamsetty
body: Its worked after seeing the instruction at "Connecting to SSL Services". Thanks


Tags: bamboo-administration

remote-agent