Cannot add keystore using JIRA Configuration Tool

Question

I have created a keystore as described here and have attempted to add it using the JIRA Configuration Tool (via the CLI since I'm on a Debian machine). When doing so I receive the following error message:

The referenced certificate could not be found or accessed. Do you want to try again?

After decompiling the relevant class, it seems this is due to a method designed to load the specified certificate details returning null. Is there any way I can get more information on why this is failing?

Tom Pitcher · Answer

Hi Daniel,

I have the exact same error if the keys are imported into Java's main keystore. I'm using the JRE packaged with JIRA, and I'm using the Configuration Tool's command line interface (not any kind of GUI, which is presumably the alternative). I'm accessing this by running the shell script "bin/config.sh" in $JIRA_HOME.

Daniel Borcherding · Answer

Tom,

Perhaps this is a stupid shot in the dark, but are you using the JRE that comes packaged with Jira or are you using your own version of Java?

Do you see any difference if you import your certs into the Java keystore instead of the JKS in Jira?

Also I am confused, are you using the configuration tool or are you using the command line?

Tom Pitcher · Answer

Hi Tiago, the keystore file's permissions are 644 so JIRA's user should be able to read it.