Change keystore location for (delegated) Active Directory SSL certificate

Question

Instead of using the JVM keystore (\JIRA\jre\lib\security\cacerts) I like Jira use a different keystore for SSL handshaking with the Active Directory. Where can I set/change the location?

e.g. when creating a connector you can set "keystoreFile=" I want to do the same for the external user directory.

JohnA_xb3t2l · Accepted Answer

Hi Lucas,

If Inderstand your question correctly, you are wanting to tell the JVM to look in a different location for it's Keystore, rather than using the default location. If this is indeed the case then you can add an argument to your JAVA_OPTS to tell the JVM to use a different Keystore. To do this just shutdown JIRA, add the following flag to the JAVA_OPTS and restart JIRA again:

-Djavax.net.ssl.keyStore="path-to-file"

All the best,
John