Create
cancel
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

SSL error: Public keys in reply and keystore don't match

Hi Folks,

I am trying SSL implementation using apache tomcat.

There are 3 certificates. root.crt, intermediate.crt and CA.crt

I have imported root and intermediate certificates using following commands:

keytool -import -alias rootCA -keystore /jira/jira-home-7.12.1/jira.jks -trustcacerts -file root.crt

keytool -import -alias intermediateCA -keystore /jira/jira-home-7.12.1/jira.jks -trustcacerts -file intermediate.crt

When third certificate is imported using command:

keytool -import -alias jira -keystore /jira/jira-home-7.12.1/jira.jks -file CA.crt

An error is thrown as:

Public keys in reply and keystore don't match

How can I resolve the issue. It needs certificate to be added in the truststore.

I have tried with a command :

keytool -import -keystore /jira/jira-installation-7.12.1/jre/lib/security/cacerts -file root.crt -alias rootCA

but it didn't help.

 

 

2 answers

How did you solve this ? @Madhura sarwade 

0 votes
Artur Moura
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
Jun 26, 2020

Hi Madhura, 

I understand that you want setup SSL to your Jira instance, the error Public keys in reply and keystore don't match is caused by generating a certificate with a different key pair. With that in mind, you need to generate it again but using the same original key pair to avoid this error. 

On the page Running Jira over SSL or HTTPS, you can follow all necessary steps to accomplish that.

Cheers,

Artur Moura

Suggest an answer

Log in or Sign up to answer