Import TeamForge's self-signed SSL certificate

If your TeamForge server uses https and a self-signed SSL certificate, you may get a Java error while connecting to TeamForge. To resolve this, you need to import the server certificate into the keystore of the JVM running the CCF Master.

  1. Get a copy of the TeamForge server certificate from your web browser.
    1. Access your site using a web browser and double-click on the padlock icon (available in most browsers) to examine the server certificate.
    2. Export the certificate to a file, and save it as <server>.cer. There is usually an option somewhere in the resulting dialogs that lets you do this.
  2. Locate the Java keystore. This is at jre/lib/security/cacerts in the location where you installed Java.
  3. Locate the Java keytool utility. This is at /bin/keytool in the location where you installed Java.
  4. Import the server certificate into the keystore.

    On Linux:

    • $ export PATH=$JAVA_HOME/bin:$PATH
    • $ sudo keytool -import -trustcacerts -alias <server> -file <server>.cer -keystore $JAVA_HOME/jre/lib/security/cacerts  
    On Windows:
    •  keytool -import -trustcacerts -alias <server> -file <server>.cer -keystore %JAVA_HOME%/jre/lib/security/cacerts
    For server, enter the hostname, not URL.
  5. At the password prompt, enter changeit. Confirm that you trust the certificate by typing yes.
  6. Restart the CCF Master server.

    You should be able to connect to the TeamForge site.