Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Where can I find the Jira certificate store?

admin admin
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 15, 2019

So, I am delivering an Atlassian infrastructure behind an https proxy.  I expect Bamboo, Bitbucket and Confluence to have no issues, but Jira, from past experience is going to be more complicated because it accesses its own resources via the network stack.

 

As such, it will need to have its certificate store, updated at the same time its proxy is, so I have a few questions;

What does the Jira server use to validate target servers, where is this found, and does the Jira server software require a fresh power-on sequence to authenticate a new certificate?

Regards and thank,

1 answer

1 accepted

0 votes
Answer accepted
Taranjeet Singh
Community Champion
July 15, 2019

@admin admin See if this KB article helps in resolving your queries regarding JIRA's JVM truststore where SSL certificates are stored for other apps or services that JIRA could trust:

 

https://confluence.atlassian.com/kb/connecting-to-ssl-services-802171215.html

admin admin
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 16, 2019

I am curious if there is a way to configure Jira to a specific JKS file as opposed to the JVM truststore?

Taranjeet Singh
Community Champion
July 16, 2019

@admin admin Please refer to the "Alternative TrustStore Locations" section in the below KB article , to see if it provides you the solution you are looking for. Although, this type of setting is not recommended due to the reasons mentioned therein.

 

https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html

Taranjeet Singh
Community Champion
July 18, 2019

@admin admin Did my answer help resolving your queries?

admin admin
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
July 18, 2019

It wasn't what I was looking for.
I am looking for a way to point Jira at a different trust store which has an established chain-of-trust installed in it, not how to add certs to the Java trust store.  I know how this is done already.

Taranjeet Singh
Community Champion
July 18, 2019

@admin admin My last response provides you guidance on exactly how to point JIRA at a different truststore by using JVM property Djavax.net.ssl.trustStore=/path/to/truststore for JIRA start up.

Refer the below KB article for more information on how to setup JVM properties and options for JIRA startup: https://confluence.atlassian.com/adminjiraserver0713/setting-properties-and-options-on-startup-964984126.html

Like Kyle Manel likes this

Suggest an answer

Log in or Sign up to answer