So, I am delivering an Atlassian infrastructure behind an https proxy. I expect Bamboo, Bitbucket and Confluence to have no issues, but Jira, from past experience is going to be more complicated because it accesses its own resources via the network stack.
As such, it will need to have its certificate store, updated at the same time its proxy is, so I have a few questions;
What does the Jira server use to validate target servers, where is this found, and does the Jira server software require a fresh power-on sequence to authenticate a new certificate?
Regards and thank,
@admin admin See if this KB article helps in resolving your queries regarding JIRA's JVM truststore where SSL certificates are stored for other apps or services that JIRA could trust:
https://confluence.atlassian.com/kb/connecting-to-ssl-services-802171215.html
I am curious if there is a way to configure Jira to a specific JKS file as opposed to the JVM truststore?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
@admin admin Please refer to the "Alternative TrustStore Locations" section in the below KB article , to see if it provides you the solution you are looking for. Although, this type of setting is not recommended due to the reasons mentioned therein.
https://confluence.atlassian.com/kb/how-to-import-a-public-ssl-certificate-into-a-jvm-867025849.html
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
It wasn't what I was looking for.
I am looking for a way to point Jira at a different trust store which has an established chain-of-trust installed in it, not how to add certs to the Java trust store. I know how this is done already.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
@admin admin My last response provides you guidance on exactly how to point JIRA at a different truststore by using JVM property Djavax.net.ssl.trustStore=/path/to/truststore for JIRA start up.
Refer the below KB article for more information on how to setup JVM properties and options for JIRA startup: https://confluence.atlassian.com/adminjiraserver0713/setting-properties-and-options-on-startup-964984126.html
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Online forums and learning are now in one easy-to-use experience.
By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.