Internal Bitbucket 5.6.1 :: Issues configuring SSL

[Ayon Dasgupta]

We are trying to configure SSL for Bitbucket 5.6.1 using the guide at this link and are having some issues. 

We have been granted a cert from our network security team using our internal CA Root.  I am generating the ssl-keystore file by running the following command-

keytool -import -alias tomcat -file CARootFile.crt -keystore ./ssl-keystore -storepass changeit

I have then added the following lines to the bitbucket.properties file-

server.port=8443

server.scheme=https

server.ssl.enabled=true

server.ssl.key-store=/opt/stash-data/shared/config/ssl-keystore

server.ssl.key-store-type=jks

server.ssl.key-alias=tomcat

server.ssl.key-store-password="changeit"

server.ssl.key-password="changeit"

Post service bounce, I receive the attached log output. A notable log entry is-

java.lang.IllegalArgumentException: java.io.IOException: Alias name [tomcat] does not identify a key entry

Interesting thing is when I execute the following-

keytool -list -keystore ./ssl-keystore -storepass changeit

I receive the following-

Keystore type: JKS

Keystore provider: SUN

 

Your keystore contains 1 entry

 

tomcat, Jan 14, 2018, trustedCertEntry,

Certificate fingerprint (SHA1): 92:C5:8A:CC:54:50:42:03:48:9A:3C:60:9C:49:60:53:96:2C:CB:22

Any assistance / guidance would be appreciated. Thanks in advance!

[Rodrigo M]

Hey Ayon

Could you take a look at the resource below?

* https://confluence.atlassian.com/bitbucketserverkb/unable-to-start-tomcat-due-to-java-io-ioexception-alias-name-not-identifying-a-key-entry-943541751.html

As mentioned there, this message refers to an error on the alias name. Try to follow the steps mentioned there in order to set the alias correctly.