JIRA With SSL (Installing JKS certificate)

[imran]

We are trying to make Jira available on SSL as up til now we are considering test application. WE can't make it work on SSL even trying all possible methods 

[Nic Brough -Adaptavist- · Accepted solution]

Your key-store has been created incorrectly, and can't be read, as it's probably not really a key-store.

How exactly did you create it?  (Feel free to xxx out any sensitive information like hosts or names, but a look at what you ran on the command line to create it with all the flags and filenames would be useful)

[imran]

Hi Nic,

Thanks for reply. We have Wildcard certificate which we have bought from DIGICERT. We have that certificate in both  .cert  and .pem format.  We looked around on internet and followed instructions available online.

Do you have proper instructions how can we convert our Wildcard certificate to JKS format and how we can test the certificate  in proper format .

regards,

[JP _AC Bielefeld Leader_]

You probably will need to import an intermediate certificate. This depends on your CA Digicert. They should provide some information on how to create a valid keystore file.

Best

JP

[Nic Brough -Adaptavist-]

This is not a case of "converting" a certificate.  A JKS file is a store for certificates, not a certificate format.

Could you tell us exactly how you created the .jks file and how you imported the certificate?

[imran]

I was actually given JKS version of certificate by our certificate provider and I also tried creating one from instructions available on internet  such as below

https://confluence.atlassian.com/adminjiraserver073/running-jira-applications-over-ssl-or-https-861253906.html

Regards

[Nic Brough -Adaptavist-]

Ok, well, your provider has given you a load of rubbish.  Especially as a .jks file is not a certificate format.  It's a store.

However, if you had followed the instructions in that document in full, you would find your system works ok and does not give you the "jks is invalid".  I suspect you have diverged from it somewhere, which is why I asked you to tell us what you have done.  So we can help you correct it.