...
You may already have it, but if you don't, it's easy to export the certificate from your browser. (We are assuming that you can access JIRA with your browser, hence the browser does have the certificate.)
| Note |
|---|
When specifying password for the exported certificate, enter at least 6 characters, and also without any space or special characters. Otherwise you may not be able to proceed later. |
To export client certificate from Firefox, open Tools | Options menu, Advanced tab, and click on View Certificates. Select certificate that matches your server and click Backup button. Enter a file name for .p12 file, and then backup password. Remember backup password.
To export client certificate from Internet Explorer, open Tools | Internet Options dialog, Content tab, then click on Certificates button. Find your certificate and click Export. Follow the wizard. Include private key in export. Select PKCS 12 format (although the extension will be PFX, you can rename it to P12). Don't include extra options. Enter password and remember it.
...
As a result of this step, you should have file jiraclient.jks in a temporary directory.
3. Place jiraclient.jks into installation directory and
...
adjust shortcut for launching JIRA Client
Copy jiraclient.jks from the previous step to C:\Program Files\JIRA Client, or whereever you have JIRA Client installed.
Then, in the same install directory, create a text file named "jiraclient.properties" (if it's already there - edit it). In jiraclient.properties, place the following lines:
...
To run JIRA Client with the client certificate, you will need to pass three additional parameters via command-line. To avoid typing them each time, you will need to modify the shortcut or script that you use to start JIRA Client.
On Windows
Find "JIRA Client" start menu item (or other shortcut that you use to launch JIRA Client), Right-Click on it and select Properties. The Shortcut tab will appear, with the Target field containing something like "C:\Program Files\JIRA Client\bin\jiraclient.exe".
Click on the Target field and modify it so it says
| Code Block |
|---|
"C:\Program Files\JIRA Client\bin\jiraclient.exe" -J-Dforce.http.jre.executor=true -J-Djavax.net.ssl.keyStore=jiraclient.jks -J-Djavax.net.ssl.keyStorePassword=<your password created at step 1> |
Use copy&paste from this article to avoid typos. Substitute your password in place of <your password created at step 1>.
| Tip |
|---|
Note the quotes in this example. Don't put additional parameters inside the quotes around the .exe file path. |
On Linux
Modify "jiraclient.sh" script. Find line that says JAVA_OPTIONS="-Xmx600m -Duse.metal=true". Modify it so it says
| Code Block |
|---|
JAVA_OPTIONS="-Xmx600m -Duse.metal=true -Dforce.http.jre.executor=true javax-Djavax.net.ssl.keyStore=/path/to/jiraclient.jks javax-Djavax.net.ssl.keyStorePassword=<your password created at step 1> |
| Tip |
|---|
For Deskzilla, the file should be named deskzilla.properties. |
| Tip |
|---|
"
|
Note the quotes are around all the line. Use full path to specify the location of jiraclient.jks.
On Mac
Right-click on JIRA Client application and select Show Package Contents. Open Contents folder. Double-click on the Info.plist file. Plist editor should start. Open Java section, then Properties subsection. Use "+" button to add the following properties:
Name | Value |
|---|---|
force.http.jre.executor | true |
javax.net.ssl.keyStore | /path/to/jiraclient.jks |
javax.net.ssl.keyStorePassword | <your password created at step 1> |
Use full path to specify the location of jiraclient.jks.
| Panel | ||
|---|---|---|
| ||
If the server uses a self-signed certificate (or a certificate signed by an unknown CA), you will need to explicitly import server's certificate into the Java's trust keystore. (See instructions.) By default, the trust keystore is called cacerts and it resides in C:\Program Files\JIRA Client\jre\lib\security\cacerts. Using jiraclient.propertiesWith the same method you used for setting the three properties described above, it's possible to specify a different location for cacerts using the following line: Code Block | : you need to set javax.net.ssl.trustStore =c:property to </path/to/ cacerts | |
| Tip | ||
If you have to write character "\" in jiraclient.properties file, use double-backslash " |
This is it!
Start JIRA Client. Try to connect. If it doesn't work, double-check that
- jiraclient.jks file exists and has at least 500 bytes;
- cacerts contains your server's certificate (use keytool -list -keystore cacerts and look for alias my_jira_server);
- It is correctly pointed to using command-line properties;
- you really launch the same shortcut / script that you have edited.
If all looks correct but it doesn't work, please contact support.