Install SSL in jira

[vidhyakk]

I installed Jira in Ec2 windows server as service . I did not configure to run in IIS

https://confluence.atlassian.com/adminjiraserver/installing-jira-applications-on-windows-938846835.html

I followed this link to install SSL. 

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html

We bought ssl from godaddy and after configuration it says certificate is invalid. (This CA Root certificate is not trusted because it is not in the Trusted Root Certification Authorities store.)

I used portecle and keytool to import . 

I can see Java folder in program files and one jre folder inside atalssian jira folder, so here which one should I set as JAVA_HOME ?

running jira over ssl article link. I am having problem at point 14,15,16. 

In 14. import root and intermediate certificate into keystore. and 16 import ca reply certificate. 

But from godaddy  I am getting 7aebg82dd7d46f2sd.crt and 7aebg82dd7d46f2sdc.pem and gd_bundle-g2-g1.crt . I dont know which one is here root and intermediate and which one is ca reply cert. 

[Andy Heinzer]

Hi,

I see that you are trying to setup SSL for Jira server, but it sounds like one of the intermediate or root certificates are not in the truststore Jira is using right now.

While Jira does ship a default java version with it, I would suggest that you instead first install your own version of Java in a completely separate directory from the Jira install.  The reason I suggest this is that because upgrading Jira can sometimes overwrite that Java directory found inside the Jira install directory and in turn you can then lose such truststore changes.  But this way I suggest, by using your own Java install, and setting that directory as the JAVA_HOME, your certificates can more easily be maintained on the system regardless of Jira upgrades.  Be sure to pick a compatible version/vendor of Java from the Supported Platforms page.  I'd also recommend the Installing Java page for steps on setting that JAVA_HOME variable.

That said, the scenario you describe here is very similar to this other post I found on godaddy's community, check out https://www.godaddy.com/community/Websites-Marketing-Website/With-Tomcat-how-do-I-import-my-key-certificate-and-dependencies/td-p/4547

The solution this user found was to merge the pem and two crt files into a single pem file and then convert that into a jks format that Tomcat can then understand and just import that single file.

I hope this helps.

Andy