Jenkins integration with RTC
I'm trying to integrate with Jenkins from RTC.
My Jenkins server is running on a SSL.
When clicking the 'Test Connection' button in Eclipse (Created a Build Engine to Jenkins), i'm getting this error:
Connection test requested.Connecting to: https://jenkins-itproject.rhcloud.com/Exception: javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.h: PKIX path building failed: java.security.cert.CertPathBuilderException: PKIXCertPathBuilderImpl could not build a valid CertPath.; internal cause is:java.security.cert.CertPathValidatorException: The certificate issued by CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US is not trusted; internal cause is:java.security.cert.CertPathValidatorException: Certificate chaining errorTest connection FAILED!
So i browsed to the URL and downloaded the certificates as DER files & added to the keystore:
(repeated it for root and intermedate CA's):
keytool -importcert -alias rhcloudroot -keystore /opt/IBM/JazzTeamServer/server/liberty/servers/clm/resources/security/ibm-team-ssl.keystore -storepass ibm-team -file /opt/certs/rhcloud.cer
-
Per test i also ran the ikeyman script as described here:
https://jazz.net/help-dev/rational-insight/topic/com.ibm.rational.raer.install.doc/topics/t_int_ssl_reportsrv_jazz_ri.html
-
I also tried this the --autoAcceptSigner as described here, but the server wouldn't start:
https://www.ibm.com/support/knowledgecenter/SSAW57_8.5.5/com.ibm.websphere.wlp.doc/ae/twlp_enable_ssl_liberty_client_container.html
Still getting the same error... any toughs?
Accepted answer
One other answer
Hi,
Just want to confirm if you are importing and installing the certificates to the jre that is used to run the RTC client.
Thanks,
Sridevi
Just want to confirm if you are importing and installing the certificates to the jre that is used to run the RTC client.
Thanks,
Sridevi
Comments
Hi Sridevi,
Thanks for your answer,
I've added the root certificate in all .keystore & cacert files i found on my server (Ubuntu Linux). in most of the files, the certificate was already added by default. My client is also present on my server machine & i'm testing from there.
Still no luck.
Could you check whether importing your certificate into the jre used by the server solves the issue?
Done that, still same error