I am having a .cer certificate provided from my IT Team for SSL confifuration . I have imported it in default keystore <JIRAHOME>\security\cacerts But still it shows an exception
Caused by: java.lang.IllegalArgumentException: jsse.alias_no_key_entry...
Although it has a private key associated with it...
Can you suggest me some concrete steps to configure ssl with existing .cer file ...
Regards,
Hemant
Hi @Hemant Madhyan ,
what is exactly the command you're running to import the certificate ? From the error, it looks like it's missing the alias argument.
Let me know if this helps,
--Alexis
C:\Program Files\Atlassian\JIRA\jre\bin>keytool -import -alias jira -keystore "
:\Program Files\Atlassian\JIRA\jre\lib\security\cacerts" -trustcacerts -file "C:
\Certificates\jira.cer"
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi @Hemant Madhyan ,
this might be because your CER file has a key file with a different alias than the one you're configuring on the command line. You actually dont need the key in the certificate that you're importing into the keystore, so I'd suggest using only the certificate without the key.
You can do this simply by editing the cer file (it's a simple text file).
Let me know if this helps,
--Alexis
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hi @Alexis Robert ,
Thanks for the reply. But as per the documentation i can see that the certificates need the private key too.
Although we can import the certificates without private key into the keystore. But, while starting the JIRA it sates the same error.
So, i followed this link
and i am able to launch JIRA on SSL now. But, it's working only while logging to the jira server not from outside as it shows certificate warning ... So, what could be the issue ?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
What do you mean by "from outside it shows certificate warning" ? Do you mean outside your corporate network ?
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.