Artifactory SSL /TeamCity Plugin

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP



Artifactory SSL /TeamCity Plugin



We recently were mandated to make our console access for TeamCity and Artifactory to use https. Both products are on a single Windows 10 desktop. We imported a signed CA for the machine and both Artifactory and TeamCity login works fine with SSL and certs are working, browser satisfied.



However, when I set the same Artifactory SSL URL in the TeamCity console under integrated Artifactory server URL configuration and hit the test connection it fails with the error below. We've imported the root certs and all needed in cert chain but still no go. TeamCity support says this is in JFrog code. Any ideas? I really need to turn off the non SSL port but can't until I have this resolved....thanks.



Error: Error occurred while requesting version information: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (javax.net.ssl.SSLHandshakeException)





Surely someone from JFrog knows how to get this working. This question was posed 3 weeks ago....does Artifactory need the certificate imported somewhere else?
– dljohnson69
Jul 9 at 14:03




1 Answer
1



The issue is Teamcity does not have the certificate in its Trusted list of certificates. Teamcity comes with it's own java and therefore the cacerts file is located under /jre/lib/security/cacerts .



To add the certificate you will need to run keytool.exe located in your JDKbin folder.


keytool.exe -importcert -file "C:artifactory-oss-6.1.0Artifactory.crt" -trustcacerts -keystore "C:TeamCityjrelibsecuritycaserts"



The following will gives advice on how to setup SSL in Artifactory for anyone looking Putting Artifactory behind SSL .



Also I had to clear my cache as I was getting authentication issues when testing Teamcity connection to Artifactory.





I have both TeamCity and Artifactory on the same box.I do have the console admin for both TC and Artifactory using https by importing the signed machine cert to the TeamCity cacerts you mentioned in your reply and also importing the same signed machine cert into the root JDK that artifactory is using. Its just errors when trying to use the same https link in the TeamCity Artifactory URL configuration (works fine non-SSL).When I looked for a *.crt in my Artifactory 3.7 it came up with zero,so I don't appear to have any default cert files in Artifactory to import into TeamCIty's cacert file
– dljohnson69
Aug 14 at 13:17






By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

-

Popular posts from this blog

Firebase Auth - with Email and Password - Check user already registered

Image
Clash Royale CLAN TAG #URR8PPP Firebase Auth - with Email and Password - Check user already registered I want to check when a user attempts to signup with createUserWithEmailAndPassword() in Firebase user Authentication method, this user is already registered with my app. createUserWithEmailAndPassword() 8 Answers 8 To detect whether a user with that email address already exists, you can detect when the call to createUserWithEmailAndPassword () fails with auth/email-already-in-use . I see that @Srinivasan just posted an answer for this. createUserWithEmailAndPassword () auth/email-already-in-use Alternatively, you can detect that an email address is already used by calling fetchSignInMethodsForEmail() (previous called fetchProvidersForEmail() ). fetchSignInMethodsForEmail() fetchProvidersForEmail() When the user trying to create an user with same email address, the task response will be "Response: The email address is already in use by another account." mFirebas
Read more

Dynamically update html content plain JS

Image
Clash Royale CLAN TAG #URR8PPP Dynamically update html content plain JS So I have a script bound in my index.html, which literally has to fetch an array of jsons from an api, then dynamically update my page when get response. But as a result I'm getting an as the only update of my page. here is my script fetch(url) .then((resp) => resp.json()) .then((resp) => resp.results.forEach(item => fetch(item.url) .then((response)=> response.json()) .then((response) => pokeArr.push(response)) .catch(console.log) ) ).catch(console.log) const filler = () => if(!pokeArr) return 0 pokeArr.map((i,j)=> return `<tr>$i.name</tr>` ) const pokeindex = () => document.getElementById('a').appendChild(document.createElement(filler())) pokeindex() When I'm consoling it, I can see in the console all the responses I get, so I'm at least doing the fetching part right. What's parberakan ? What's pokeArr ? – T.J. Crowder Aug 8 at 12
Read more

How to determine optimal route across keyboard

Image
Clash Royale CLAN TAG #URR8PPP How to determine optimal route across keyboard I'm trying to automate the typing process in a video game. Players are given an on-screen QWERTY keyboard layout that they can navigate with the control stick (up, down, left, right) in order to select a letter to type. I was wondering if there was a module for Python (or some other resource I could explore) that would help my program find a path across the keyboard as it types each letter in a given message. In other words, if the first letter typed was "A" and the next letter was "B", the module would know that the program should move 1 space down on the keyboard and 4 spaces to the right. Currently, I have the program resetting to the "G" key after each letter is typed (allowing me to use fixed-directions as the program parses each character in the desired message). As you can imagine, this is quite inefficient and defeats the purpose of automating the typing in the fir
Read more