Artifactory SSL /TeamCity Plugin

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP



Artifactory SSL /TeamCity Plugin



We recently were mandated to make our console access for TeamCity and Artifactory to use https. Both products are on a single Windows 10 desktop. We imported a signed CA for the machine and both Artifactory and TeamCity login works fine with SSL and certs are working, browser satisfied.



However, when I set the same Artifactory SSL URL in the TeamCity console under integrated Artifactory server URL configuration and hit the test connection it fails with the error below. We've imported the root certs and all needed in cert chain but still no go. TeamCity support says this is in JFrog code. Any ideas? I really need to turn off the non SSL port but can't until I have this resolved....thanks.



Error: Error occurred while requesting version information: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target (javax.net.ssl.SSLHandshakeException)





Surely someone from JFrog knows how to get this working. This question was posed 3 weeks ago....does Artifactory need the certificate imported somewhere else?
– dljohnson69
Jul 9 at 14:03




1 Answer
1



The issue is Teamcity does not have the certificate in its Trusted list of certificates. Teamcity comes with it's own java and therefore the cacerts file is located under /jre/lib/security/cacerts .



To add the certificate you will need to run keytool.exe located in your JDKbin folder.


keytool.exe -importcert -file "C:artifactory-oss-6.1.0Artifactory.crt" -trustcacerts -keystore "C:TeamCityjrelibsecuritycaserts"



The following will gives advice on how to setup SSL in Artifactory for anyone looking Putting Artifactory behind SSL .



Also I had to clear my cache as I was getting authentication issues when testing Teamcity connection to Artifactory.





I have both TeamCity and Artifactory on the same box.I do have the console admin for both TC and Artifactory using https by importing the signed machine cert to the TeamCity cacerts you mentioned in your reply and also importing the same signed machine cert into the root JDK that artifactory is using. Its just errors when trying to use the same https link in the TeamCity Artifactory URL configuration (works fine non-SSL).When I looked for a *.crt in my Artifactory 3.7 it came up with zero,so I don't appear to have any default cert files in Artifactory to import into TeamCIty's cacert file
– dljohnson69
Aug 14 at 13:17






By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Popular posts from this blog

Firebase Auth - with Email and Password - Check user already registered

Dynamically update html content plain JS

Creating a leaderboard in HTML/JS