[JIRA] (JENKINS-60857) jetty no longer accepts the keystore

[francois.isabell...@gmail.com (JIRA)]

Title: Message Title

François Isabelle edited a comment on JENKINS-60857   Re: jetty no longer accepts the keystore Confirmed, I am using wildcard. Instructions to generate the keystore (as Ansible snippets) With some variables defined {code:java} jenkins_ssl_cert: "\{{ jenkins_ssl_dest }}/your_domain_example_org.crt" jenkins_ssl_key: "\{{ jenkins_ssl_dest }}/your_domain_example_org.key" jenkins_ssl_jks: "\{{ jenkins_ssl_dest }}/jenkins.jks" jenkins_ssl_chain: "\{{ jenkins_ssl_dest }}/DigiCertCA.crt" {code} The keystores are created in 2 steps. {code:java} - name: Create PKCS command: "openssl pkcs12 -inkey \{{ jenkins_ssl_key }} -in \{{ jenkins_ssl_cert }} -export -out \{{ jenkins_ssl_dest }}/keys.pkcs12 -passout pass:$SECRET” become: true become_user: jenkins register: create_pkcs_result - name: Create JKS command: " keytool -importkeystore -srckeystore \{{ jenkins_ssl_dest }}/keys.pkcs12 -srcstoretype pkcs12 -destkeystore \{{ jenkins_ssl_jks }} -srcstorepass jenkins -deststorepass $SECRET -noprompt" become: true become_user: jenkins register: create_jks_result  {code} Maybe that can be useful. Add Comment   This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.204231.1579860751000.5696.1579893180207%40Atlassian.JIRA.