Java imports the SSL certificate into the system KeyStore

Before you install Jira and confluence, you experience an issue with the application link after you configure the SSL certificate:

SSL certificates are not trusted, resulting in jira and confluence not being associated.

Tried a lot of ways to give up after a fruitless attempt.

Finally gave up ...

You think this post is over?

In fact, it does not, I just want to make up a word, let the article look fuller.

Because the solution I have found, and very simple.

Start knocking on the blackboard ——————————— below —————————————

1. Log in to the server, download the Installcert.java locally, and compile through Java:

# git clone https://github.com/escline/InstallCert.git# javac installcert.git

2. Access the server and retrieve the certificate in the format:

Java installcert [domain]:[port]

# java Installcert www.test.abcd.com:443Loading keystore/usr/local/jdk1.8.0_161/jre/lib/security/cacerts ... Opening connection to www.test.abcd.com:443...Starting SSL handshake .... Added certificate to KeyStore ' Jssecacerts ' using alias ' www.test.abcd.com-1 '

3. Extract the certificate from the created Jssecacerts KeyStore in the format:

Keytool-exportcert-alias [domain]-1-keystore jssecacerts-storepass changeit-file [domain name].cer

# Keytool-exportcert-alias www.test.abcd.com-1-keystore jssecacerts-storepass changeit-file Www.test.abcd.com.Certificate stored in file <www.test.abcd.com.cer>

4. Import the certificate into the system KeyStore in the following format:

Keytool-importcert-alias [domain name]-keystore [System keystore Path]-storepass changeit-file [domain name]. cer

# Keytool-importcert-alias Www.test.abcd.com-keystore/usr/local/jdk1.8.0_161/jre/lib/security/cacerts-storepass Changeit-file Www.test.abcd.com.cer ... Owner ...  Enter Yes    Trust this certificate? [No]:  Yescertificate was added to KeyStore

　　

Note: If you encounter an error similar to the following when importing the certificate,

Keytool Error: java.lang.Exception: Certificate not imported, alias <www.test.abcd.com> already exists

I'm afraid I can't play anymore.

I didn't know what to do because I had this problem for the first time.

may wish to try "Keytool--help", the result let me see the-delete parameter, as if see a glimmer of hope.

So I tried again "Keytool-delete--help", found the-alias, then I know a smile, it seems to understand what, since can be imported, it can be deleted.

# Keytool-delete-alias Www.test.abcd.com-keystore/usr/local/jdk1.8.0_161/jre/lib/security/cacerts-storepass Changeit

No output? No output is the best output, try importing the command again:

# Keytool-importcert-alias Www.test.abcd.com-keystore/usr/local/jdk1.8.0_161/jre/lib/security/cacerts-storepass Changeit-file Www.test.abcd.com.cer

It worked! Jira and confluence operate the same way.

5. Finally, don't forget to restart a service. Login page to view again:

It can be said to be perfect ~

Java imports the SSL certificate into the system KeyStore