# echo "" | openssl s_client -connect sensnet.cythres.cz:4848 -prexit 2>/dev/null | sed -n -e '/BEGIN\ CERTIFICATE/,/END\ CERTIFICATE/ p' > sensnet.cythres.cz.pem # keytool -import -alias sensnet -keystore egothor.org-jssecacerts -file sensnet.cythres.cz.pem # keytool -list -v -keystore egothor.org-jssecacertsVložení certifikátu "Let's Encrypt" (lea.crt) pro provoz např. Jenkinse
# mkdir /var/lib/jenkins/.keystore # cp /etc/pki/ca-trust/extracted/java/cacerts /var/lib/jenkins/.keystore # /usr/lib/jvm/jre-openjdk/bin/keytool -keystore /var/lib/jenkins/.keystore/cacerts -import -alias lea -file lea.crt
Defaultní heslo je "changeit"
V /etc/sysconfig/jenkinsJENKINS_JAVA_OPTIONS="-Djava.awt.headless=true -Djavax.net.ssl.trustStore=$JENKINS_HOME/.keystore/cacerts -Djavax.net.ssl.trustStorePassword=changeit"-- LeoGalambos - 21 Aug 2016