How can I replace the java trust store for Jira

[admin admin]

OK, so I have my server configured and it is up-and-running, but I need to change the certificate it uses, and I am unable to do so because I am unable to access the cacerts file on the Jira server's $java_home/lib/security directory

Is there a way to replace this file, and reference Jira to use it?

[Kurt Klinner · Accepted solution]

@admin admin 

Hi 

you could have a dedicated trust store, that you reference in the server.xml of your Jira installation by using

keyAlias="jira" keystoreFile="<Jira_HOME>/jira.jks" keystorePass="changeit" keystoreType="JKS"

https://confluence.atlassian.com/adminjiraserver/running-jira-applications-over-ssl-or-https-938847764.html provides additional information

Cheers

Kurt

[admin admin]

Hi Kurt,

Sorry for the delay in responding, and thank-you for your suggestion.  I have designed docker containers for my company for a number of years, and it had simply skipped my attention that certificate management is automated in a conventional Linux distro, and so this wasn't the problem I was expecting;
In fact it wasn't a problem at all, b/c the distro automatically resolved the certificate.

With that in mind though, I have previously utilized the steps you specify in older servers as well as within my Docker containers so they certainly are applicable if such steps are necessary for anyone else.

Much appreciated,

Kyle