Forums

Articles
Create
cancel
Showing results for 
Search instead for 
Did you mean: 

Can't get intermediate certificate to work with Jira.

IT Department Better.be
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
June 7, 2018

I have a wildcard certificate from digicert and I need to install this together with an intermediate certificate. But I can not find the proper way to configure the Java connector in such a way that the intermediate certificate is returned to the connecting client. Could you tell me what I should do? When I connect using OpenSSL i see the following error:

Verify return code: 21 (unable to verify the first certificate)

My connector config:

<Connector port="8443" protocol="org.apache.coyote.http11.Http11NioProtocol"
maxHttpHeaderSize="8192" SSLEnabled="true"
maxThreads="150" minSpareThreads="25"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="false" sslProtocol="TLS" useBodyEncodingForURI="true"
keyAlias="internalcert" keystoreFile="/home/httpd/Jira/application-data/jira/jira.jks" keystorePass="password" keystoreType="JKS" />

 I have also tried the following connector:

<Connector port="8443"
maxHttpHeaderSize="8192"
maxThreads="150"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
SSLEnabled="true"
SSLCertificateFile="/home/httpd/Jira/application-data/jira/wildcard.internal.betterbe.com.crt"
SSLCertificateKeyFile="/home/httpd/Jira/application-data/jira/wildcard.internal.betterbe.com.key"
SSLCertificateChainFile="/home/httpd/Jira/application-data/jira/ThawteTLSRSACAG1.pem"
/>

when I do this, the connector doesn't even start at all. Jira does start though, so it seems like an issue in tomcat.

Everywhere else where I use this certificate with the intermediate I can configure it and it works fine. Just not in Jira. 

 

Thanks

jan Hugo Prins.

 

 

0 answers

Suggest an answer

Log in or Sign up to answer