search

gitblit-org / gitblit

pure java git solution
http://gitblit.com
Apache License 2.0
2.27k stars 671 forks source link

Add Certificate Chain #1399

Closed farzadrabiee closed 1 year ago

farzadrabiee commented 2 years ago

The default Certificate Hierarchy on the serverKeyStore.jks file is like below:

Gitblit Certificate Authority | localhost

I have a trusted p12 certificate file that contains the private and public keys in it. I'd to add it as the Certificate Chain on Gitblit Certificate Authority.

I am wondering how can I do it?

flaix commented 2 years ago

Wait, aren't running Gitblit on Azure App Service? I thought Azure terminates TLS at the entry level and it never reaches your App.

Anyway, your can import your certificates into the key store, e.g with the keytool (doc) command on the command line, or on your PC with a GUI like KeystoreExplorer. Give the certificate an identifying alias and in the Gitblit configuration set the server.certificateAlias setting to that same alias name.

flaix commented 1 year ago

Close as Done