SSL certificate question Jira

[Ruedi Neff]

Hi

I'm pretty new on Jira and Tomcat. We have to update our ssl certificate for an other year with a new COMODORS certificate. We've had a old certificate (GeoTrust) with *.domain.ch which is correct from the naming aspect but expired from the date. - Now we've falsely made one with *domain.ch without the first dot... This should be a wildchart certificate for our domain.ch. - Will this work or can this be the problem for not restarting Jira after this ssl certificate update?

We're running Jira 7.2.4 and Tomcat 8.0.33.

Thanks for your suggestions

kind regards

[Tayyab Bashir]

Hi, 

No, I think this will not work for you. 

*domain.ch is expecting something like:
wwwdomain.ch or abcdomain.ch 

So it will not work for www.domain.ch since its another sub-level domain. 

But your CA shouldn't issue such a certificate in the first place.
Because you can easily impersonate other domains that don't belong to you.
For e.g. foo-domain.ch etc, (which are clearly not yours)

[Nic Brough -Adaptavist-]

I'd agree with Tayyab here, your "false" certificate is effectively invalid.

What errors are you getting on trying to start Jira?