Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-7531

SSL Truststore configuration in config.xml does not work as expected

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • Low
    • None
    • 4.8.15
    • Integrations
    • None

    Description

      Issue Summary

      When trying to configure a non-default TrustStore file path in Fisheye using the UI (Administration -> Global Settings -> Server) or by utilizing config.xml, these changes are not taking effect as expected.

      This is reproducible : yes

      Steps to Reproduce

      • Import a self self signed certificate of a remote service (like bitbucket) into a truststore file located in a non-default location.
      • Make Fisheye use the TrustStore file by configuring its path from Administration -> Global Settings -> Server as shown below.
      • Restart Fisheye for the settings to take effect.
      • Try integrating the external service via applinks or some other integrations.

      Expected Results

      • Fisheye should use the configured Truststore to trust the external service's self signed certificate.

      Actual Results

      • The integration fails with "PKIX Path Building Failed" error.

      Workaround

      • Force the JVM to use the Truststore by configuring JVM parameter as shown below.
        export FISHEYE_OPTS=-Djavax.net.ssl.trustStore=/path/to/truststore
        

      Creating ticket as part of warranty bug.

      Attachments

        1. screenshot-1.png
          164 kB
          Karthik Mahesh

        Activity

          People

            Unassigned Unassigned
            ce91f45cf510 Karthik Mahesh
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: