Hostname api-private.atlassian.com not verified
Platform notice: Server and Data Center only. This article only applies to Atlassian products on the Server and Data Center platforms.
Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.
*Except Fisheye and Crucible
Problem
Unable to execute the migration plan (Server to Cloud) using the Migration Tool.
The following appears in the atlassian-confluence.log
2019-03-18 09:41:29,669 ERROR [Caesium-1-4] [agent.service.stepexecutor.ProgressTracker] error Step failed, message: An unexpected error occurred during step: Migrating attachments. Error: An IO exception occurred when communicating with a downstream service
com.atlassian.migration.agent.okhttp.IOHttpException: An IO exception occurred when communicating with a downstream service
Caused by: javax.net.ssl.SSLPeerUnverifiedException: Hostname api-private.atlassian.com not verified:
certificate: sha256/xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx=
DN: CN=*.atlassian.net, O="Atlassian Network Services, Inc.", L=San Francisco, ST=California, C=US
subjectAltNames: [*.atlassian.net, atlassian.net]Diagnosis
Diagnostic Steps
Check in the Confluence JVM parameters if the following has been configured:
-Djsse.enableSNIExtension=falseCause
Setting the parameter -Djsse.enableSNIExtension=false means when you connect to a virtual server (which means there are many web servers on one IP address) then it stops the translation of IP address to the domain name. Basically, it stops just about every connection from working.
Resolution
- Shutdown Confluence
- Remove the following parameter from Confluence JVM settings:
-Djsse.enableSNIExtension=false- Start Confluence