nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

How do I apply an existing wildcard SSL cert for Jira?

Eric Criniere

I have attempted to follow several articles related to applying an existing wildcard SSL certificate to Jira and have been unsuccessful on each attempt. Whether it's using keytool, config.bat, editing the server.xml file, etc..nothing is working.

We have an existing wildcard cert that we would like to apply to Jira, can someone please assist?

Thank You!

Accepted answers

All comments

Josh Steckler

The best way to use SSL is with an web proxy in front of JIRA. But as long as you have the private key for your wildcart certificate and the root ca cert, you can import these into a new keystore. This page seems to explain it well by using openssl before using keytool. https://confluence.atlassian.com/kb/how-to-import-an-existing-ssl-certificate-for-use-in-tomcat-838412853.html

After that, you can configure your server.xml to point to that keystore using the regular instructions.

Eric Criniere

TY. I have tried the method mentioned and will try it again tomorrow morning. My complaint is really with the way the process is structured, in that there are more than few assumptions, it states about 3 times the word "assume".

Any reason this process is not well documented somewhere? It seems as though the resources for this are all over the place. I am currently documenting the process and will share all my information once complete, but I do find this process unnecessarily difficult.

Josh Steckler

I agree that the Proxy/HTTPS documentation could use improvement, and that there are a lot of assumptions about both the environment and the administrator. But there are also lots of different ways to set this up. It has improved over the past few revisions.

I would also think about looking into a proxy as SSL termination would be handled better by the proxy rather than tomcat. Post again here if you have other issues getting https enabled, and if this works don't forget to hit the "accept as solution" button!

-Josh

Eric Criniere

Ill let you know by tomorrow if it works. TY!

Kevin L_6sg7iw

i got this to work but how do you import the intermediate certs? thanks

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

jira-service-desk

ssl