nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Update Expired SSL Certificate in Confluence Server

Sean_6mz6lv

The SSL certificate used in our Confluence Server instance has expired, so I want to update it with the renewed certs.

When I run

/opt/atlassian/confluence/jre/bin/keytool -import -alias confluence -keystore /opt/atlassian/confluence/conf/file.jks -file bundle.crt

I get the following error:

keytool error: java.lang.Exception: Certificate reply does not contain public key for <confluence>

What am I missing here?

Accepted answers

Sean_6mz6lv

I was able to fix this by doing the following:

Create a PFX file using the certificate and the key:
`openssl pkcs12 -export -out /home/user.name/certs-2020-22.pfx -inkey /home/user.name/new.key -in /home/user.name/new.crt`
Create a new KeyStore (.jks) file using the PFX file we just created:
`keytool -importkeystore \ -srckeystore /home/user.name/certs-2020-22.pfx -srcstoretype PKCS12 -srcstorepass add_password \ -deststorepass add_password -destkeypass add_password -destkeystore /opt/atlassian/confluence/conf/certs-2020-22.jks`
Update the following fields in `server.xml`: keyAlias, keystoreFile, keystorePass
Restart Confluence: `/etc/init.d/confluence restart`

All comments

Sean_6mz6lv

I was able to fix this by doing the following:

Create a PFX file using the certificate and the key:
`openssl pkcs12 -export -out /home/user.name/certs-2020-22.pfx -inkey /home/user.name/new.key -in /home/user.name/new.crt`
Create a new KeyStore (.jks) file using the PFX file we just created:
`keytool -importkeystore \ -srckeystore /home/user.name/certs-2020-22.pfx -srcstoretype PKCS12 -srcstorepass add_password \ -deststorepass add_password -destkeypass add_password -destkeystore /opt/atlassian/confluence/conf/certs-2020-22.jks`
Update the following fields in `server.xml`: keyAlias, keystoreFile, keystorePass
Restart Confluence: `/etc/init.d/confluence restart`

Sanket_qnwpnq

Thank you so much for this, It worked perfectly fine to update the SSL certificate on Confluence and Jira with the new certificate.

Just in case, if someone needs additional info - server.xml is located at the installation folder for Confluence or Jira /conf/server.xml. I used keyAlias = "1" keyStoreFile="path_of_jks_file" and keyStorePass="add_password_value".

Damian Pawski

Thank you

Worked with JIRA and Confluence.

Damian

Techdsmart

Hi Guys,

I have followed the above in Jira but whenever i restart, webservice doesn't come up. I get the following error from logs

An error occurred when performing the Gadget feed URL healthcheck
org.apache.http.conn.ConnectTimeoutException: Connect to xxxxxxxxx.ch:443 [xxxxxxxxxx] failed: Read timed out

I imported both RootCA & Domain wildcard cert to JKS File. I can see both of the aliases when i list using

keytool -list -v -keystore xxxxxxxxxxx.jks

The old cert is experiencing soon, so am seeking to update. When i revert to old alias related to old JKS/cert, Jira is able to start. Is there anything i am missing please? Its been three days of its like am giving up.

I will appreciate you help guys.

PS: Jira is running in Docker

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

server

confluence-server

atl-gruland