Import self-signed SSL certificates

Hosted TeamForge and ScrumWorks Pro instances use self-signed SSL certificates. To convince your Java environment to accept these certificates, import them into the JVM certificate keystore

1. Get a copy of the certificate from your web browser.
   1. Access your site using a web browser and double-click on the padlock icon (available in most browsers) to examine the server certificate.
   2. Export the certificate to a file, and save it as <server>.cer. There is usually an option somewhere in the resulting dialogs that lets you do this.
2. Set the JAVA_HOME environment variable to point to the JVM used by CCF.
   • On Windows: set JAVA_HOME=C:\some\path
   • On OSX: export JAVA_HOME=/System/Library/Frameworks/JavaVM.framework/Home
   • On Linux: export JAVA_HOME=/some/path/to/java
3. Locate the Java keystore. This is at jre/lib/security/cacerts in the location where you installed Java.
4. Locate the Java keytool utility. This is at /bin/keytool in the location where you installed Java.
5. Import the server certificate into the keystore.

   On Linux:

   • $ export PATH=$JAVA_HOME/bin:$PATH
   • $ sudo keytool -import -trustcacerts -alias <server> -file <server>.cer -keystore $JAVA_HOME/jre/lib/security/cacerts
   On Windows:
   • keytool -import -trustcacerts -alias <server> -file <server>.cer -keystore %JAVA_HOME%/jre/lib/security/cacerts
   For server, enter the hostname, not URL.
6. At the password prompt, enter changeit. Confirm that you trust the certificate by typing yes.