SSL Renewal

[David Ashworth]

Hi all,

I am trying to renew an expiring certificate but not having any luck. These are the commands we have previously run without issue:

..\jre\bin\keytool -genkey -alias server -keyalg RSA -keysize 2048 -keystore <FILENAME>.jks

..\jre\bin\keytool -certreq -alias server -file csr2022.csr -keystore <FILENAME>.jks

..\jre\bin\keytool -import -alias server -file <CERT_NAME.p7b> -keystore wisdom.jks

Its failing on the last step (the import) with:

... is not trusted.
Warning:
Reply #4 of 4 uses the SHA1withRSA signature algorithm which is considered a security risk. This algorithm will be disabled in a future update.

Install reply anyway? [no]:

We use a custom location for the "keystoreFile" as specified in the server.xml config. Any help would be appreciated

Thanks,
David

[KAGITHALA BABU ANVESH]

Hello @David Ashworth ,

I'm sure, you went through the below link

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html 

please check the above once.

Thanks,
Anvesh Kagithala

[David Ashworth]

Hi @KAGITHALA BABU ANVESH 

Now i get the error "keytool error: java.lang.Exception: Failed to establish chain from reply"