Configuring Jenkins with StartSSL - adding the issuer chain

后端 未结 1 1822
无人共我
无人共我 2021-02-06 13:02

I am unable to correctly configure Jenkins to use a StartSSL certificate. I\'m running it with command line arguments that specify paths to the private key and my certificate as

相关标签:
1条回答
  • 2021-02-06 13:45

    I had a similar problem and after some research what got everything to be trusted was :

    1. Merged the intermediate authority certificate and <mydomain.crt file> into 1 unified certificate called merged.cer using the link you mentioned

    2. (From: https://serverfault.com/questions/569866/jenkins-wont-serve-with-ca-signed-certificate)

      openssl pkcs12 -inkey /location/to/key.pem -in /location/to/merged.cer  -export -out keys.pkcs12
      
      keytool -importkeystore -srckeystore keys.pkcs12 -srcstoretype pkcs12 -destkeystore jenkins.jks
      

    NOTE: the key to use for the merged.cer should be the same as <my private key file>

    Then follow the Jenkins Wiki to use the KeyStore instead of the certificate

        java -jar jenkins.war --httpPort=-1 --httpsPort=8080 --httpsKeyStore=/path/to/jenkins.jks --httpsPrivateKey=<my private key file>
    
    0 讨论(0)
提交回复
热议问题