程序员和做网站那个好找工作,深圳住建官网,正规的大宗商品交易平台,网站访问量 显示代码命令行配置步骤 Command line installation
过程说明#xff1a; 创建存放证书的本地秘钥库keystore文件jira.jks#xff0c;生成证书签名请求文件csr.txt或者jira.csr#xff1b; 自签名#xff0c;生成密钥和根证书#xff1b; 使用根证书ca.crt对csr.txt进行签名…命令行配置步骤 Command line installation
过程说明 创建存放证书的本地秘钥库keystore文件jira.jks生成证书签名请求文件csr.txt或者jira.csr 自签名生成密钥和根证书 使用根证书ca.crt对csr.txt进行签名生成jira.crt文件 导入根证书、签名的证书至本地秘钥库
步骤一、创建密钥库
Step 1. Create the KeyStore
Generate the Java KeyStore.JAVA_HOME/keytool -genkey -alias jira -keyalg RSA -keystore Jira_HOME/jira.jks
实际步骤
keytool -genkey -alias jira -keyalg RSA -keystore /data/jirasoftware-home/jira.jks
密码secret 配置过程参数
What is your first and last name?[Unknown]: xx
What is the name of your organizational unit?[Unknown]: xx
What is the name of your organization?[Unknown]: xx
What is the name of your City or Locality?[Unknown]: Beijing
What is the name of your State or Province?[Unknown]: Beijing
What is the two-letter country code for this unit?[Unknown]: CNInstead of the first and last names, enter the server URL, excluding https://. For example: jira.atlassian.com.
注 1*.jks文件不要放在安装目录以免后续升级时被冲掉 此处放在/opt/jirasoftware-home下 2执行时要输入 firt and last name 时。要写域名或者IP比如: 192.168.100.101jira.company.com 没有域名此处使用xx 3执行时要输入密码只能是字母和数字组合记住了后续要用到。
Enter a password.
2, 生成证书签名请求*.csr
Create the CSR for signing and the password from the step 2.JAVA_HOME/keytool -certreq -alias jira -file /output/directory/csr.txt -keystore Jira_HOME/jira.jks
Submit the CSR to the CA for signing. Theyll provide a signed certificate and a root or
实际步骤
keytool -certreq -alias jira -file /home/jira/csr.txt -keystore /opt/jirasoftware-home/jira.jks
3, 签名*.crt(有俩种方式获取)
1CA机构签名
将生成的 jira.csr 提交给CA机构签名CA会给你签名后的证书 jira.crt 以及根证书或者中间证书root.crt
2自签名
生成密钥和根证书
openssl req -newkey rsa:2048 -nodes -keyout ca.key -x509 -days 3650 -out ca.crt
自签名
openssl x509 -req -CA ca.crt -CAkey ca.key -in jira.csr -out jira.crt -days 3650 -CAcreateserial
实际配置步骤
# openssl x509 -req -CA ca.crt -CAkey ca.key -in ../csr.txt -out jira.crt -days 3650 -CAcreateserial
Signature ok检查签名
openssl verify -verbose -CAfile ca.crt jira.crt
jira.crt: OK 4, 导入根证书、签名的证书至本地秘钥库
$JAVA_HOME/bin/keytool -importcert -alias rootCA -keystore /opt/jirasoftware-home/jira.jks -trustcacerts -file ca.crt$JAVA_HOME/bin/keytool -importcert -alias jira -keystore /opt/jirasoftware-home/jira.jks -file jira.crt
密码xx
检查导入证书
$JAVA_HOME/bin/keytool -list -alias jira -keystore /data/jirasoftware-home/jira.jksEnter keystore password:
jira, Aug 16, 2023, PrivateKeyEntry,
Certificate fingerprint (SHA-256):
二、配置JIRA服务
1备份Jira_INSTALL/conf/server.xml
2配置https连接选项
编辑Jira_INSTALL/conf/server.xml增加如下 Connector port18080 relaxedPathChars[]| relaxedQueryChars[]|{}^#x5c;#x60;quot;lt;gt;protocolorg.apache.coyote.http11.Http11NioProtocolmaxHttpHeaderSize8192 SSLEnabledtruemaxThreads150 minSpareThreads25enableLookupsfalse disableUploadTimeouttrueacceptCount100 schemehttps securetruesslEnabledProtocolsTLSv1.2,TLSv1.3clientAuthfalse useBodyEncodingForURItruekeyAliasjira keystoreFile/opt/jirasoftware-home/jira.jks keystorePassxx keystoreTypeJKS/
参数备注
port18080
SSLEnabledtrue
securetrue
sslEnabledProtocolsTLSv1.2,TLSv1.3
keyAliasjira
keystoreFile/opt/jirasoftware-home/jira.jks
keystorePassxx
keystoreTypeJKS
如果https端口不是8443修改了端口http里的对应也要改 Connector port8080 relaxedPathChars[]| relaxedQueryChars[]|{}^#x5c;#x60;quot;lt;gt;maxThreads150 minSpareThreads25 connectionTimeout20000 enableLookupsfalsemaxHttpHeaderSize8192 protocolHTTP/1.1 useBodyEncodingForURItrue redirectPort8443acceptCount100 disableUploadTimeouttrue bindOnInitfalse/
3配置http自动重定向https页面可选未配置
编辑Jira_INSTALL/atlassian-jira/WEB-INF/web.xml在前增加如下
/data/jirasoftware/atlassian-jira/WEB-INF 参考链接 https://confluence.atlassian.com/adminjiraserver0822/running-jira-applications-over-ssl-or-https-1142238093.html
