Im new to Jira and Tomcat as I have taken over the admining of this server. I need to update the cert on it as we are about to expire but I dont know what to do. I was looking at docks and they talked about portecle but I am not finding anything to looks like a keystore to open. The next option is to use openssl but Im not finding commands on how to find the cert or if I can just request a new csr and get my cert and then where to replace it. Can anyone help?
Thanks
Dusty
Where is the cert being managed? If it is being managed in Java, I would recommend moving SSL termination to a reverse proxy server. It is far easier to manage certs this way and doesn't require a restart of the application. This will also allow you to bind to 443 and have the potentially less secure Java application run as an unprivileged user and listen on a high port. Atlassian has this well documented, and it's easy to set up. They also have the process documented if you're terminating SSL in Tomcat. I hope this helps.
Sorry. I have been trying to dig through our install. It looks like the cert is managed with java. I found the old keystore file but have no clue as to the password since the default does not work. I created a new keystore and imported my intermediate certs and the jira cert that expires in 2020. I ran the batch file and updated the keystore path, alias etc. Saved it and made sure the changes were wrote to the server.xml file. I restarted the jira and tomcat services but when I loaded the webpage the old cert is still being used. Where can I look for the path that its using the old keystore still?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.