Install a "new" CA-signed SSL certificate

Question

Hi all,

I'm new to Bitbucket and installing certificates in general. My colleague managed the server and he has since left.

The ssl certificate expired and I have contacted central IT to obtain another through a vendor. I now have a .pfx file but I'm unsure of how to enrol it into the keystore.

Reading the Atlassian knowledgebase article: Secure Bitbucket with Tomcat using SSL | Bitbucket Data Center and Server 7.13 | Atlassian Documentation

I tried to import it via the instructions, but can see I need the certificate rather than the .pfx file. Do I need to extract it from the file? I've done a bit of research and have OpenSSL too, but I'm stuck.

Could anyone help to point me in the correct direction, or advice on this?

Many thanks,

Mike Sherratt · Answer

Update on this, is that I've created a new ssl-keystore and have enrolled the root\intermediary\server certificates, but now the Atlassian Bitbucket service wont start. Any suggestions?

Thanks

Mike Sherratt · Answer

Hi all, can anyone help with this?