jfrog / teamcity-artifactory-plugin

TeamCity plugin that enables traceable build artifacts with Artifactory
https://www.jfrog.com/confluence/display/JFROG/TeamCity+Artifactory+Plug-in
Apache License 2.0
42 stars 47 forks source link

Artifactory plugin is not using the custom SSL certificates installed in and distributed by TeamCity #122

Open onkeld0m opened 1 year ago

onkeld0m commented 1 year ago

Hi dev team,

the plugin does not seem to use the SSL certificates, which are defined on the TeamCity master server and distributed to all agents.

We've got an internal CA running and use certificates signed by that CA on all machines (Artifactory as well). The root certificate is stored in TeamCity and all agents are aware of it, but when trying to upload artefacts and files to Artifactory via the plugin, we receive an "untrusted" error.

That problem could be solved by adding the root certificate manually into the JVM keystore the TeamCity agent service is using (the bundled one - to be clear). Manually installing that certificate on various agents is not the idea (and should not be necessary thanks to the TC auto distribution ). Also those changes will be overridden and need to be re-done as soon as the TC agent service is upgraded.

Could you look into this issue?

Best regards, Dominic Finke