Confluence SSL Certificate Chain

Question

Can anyone point me in the direction of configuration steps to get Confluence to provide the full SSL certificate chain?

I've checked my keystore and it has the intermediate certificate in there, it just doesn't seem to be using it.

This isn't mentioned at all in the Confluence docs :-(

cloud-operations · Answer

It turns out the keys in my keystore weren't properly configured - whoever set it up had just imported the intermediate, not associated it with the site certificate.

A free app called KeyStore Explorer was very helpful in this.

cloud-operations · Answer

The key part is "and tell the server.xml about the intermediate certificates".

How exactly? As I already said, the documentation (on the page you referenced) does not cover this.

Danyal Iqbal · Answer

a certificate chain is configured similar to a single certificate. You need to add them to a keystore, make the keystore known to the webserver (in server.xml). For a chain you will have to concatenate the certificates  and tell the server.xml about the intermediate certificates. I would recommend the usual SSL setuip guide for confluence:

https://confluence.atlassian.com/conf64/running-confluence-over-ssl-or-https-936511699.html