You're on your way to the next level! Join the Kudos program to earn points and save your progress.
Level 1: Seed
25 / 150 points
Next: Root
1 badge earned
Challenges come and go, but your rewards stay with you. Do more to earn more!
What goes around comes around! Share the love by gifting kudos to your peers.
Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!
Join now to unlock these features and more
The Atlassian Community can help you and your team get more value out of Atlassian products and practices.
Hi Guys,
I am trying to set up SSL connection between jira service management and postgresql. What I did is as below:
1. Installed jsm at first
2. Generated server.crt on postgresql server (the server.crt is generated from internal PKI system)
3. Turned on SSL on postgresql server, I verified it as well
4. Copied server.crt to jsm server /tmp folder and stopped jsm, modified dbconfig.xml:
<url>jdbc:postgresql://<ip_address>:5432/jiradb?ssl=true&sslmode=verify-full&sslrootcert=/tmp/server.crt</url>
5. Start jsm
Once the url is loaded, it navigated me to the setup page instead of the previous login one, it seems the dbconfig.xml is not recognized at all. Same issue I found in https://community.atlassian.com/t5/Jira-questions/Secure-postgres-JDBC-connection/qaq-p/1708162#U1943398, but there is no explicit solution in it.
Could anyone have any suggestion for this?
Thanks in advance.
Best Regards,
Jason
Well, I finally figured out the issue, jdbc string should be like:
<url>jdbc:postgresql://<ip_address>:5432/jiradb?ssl=true;sslmode=verify-full;sslrootcert=/tmp/server.crt</url>
The delimeter must be ";" instead of "&". Btw, I did not import the crt to keystore on jira server.
When i try to use ";" i get an error. When i use "&" i don't get any errors but Jira asks me to set up a new data base. Have you seen this before.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.