How to add certificate for remote repository in JFrog ArtifactoryHow do I clone a subdirectory only of a Git repository?How do you clone a Git repository into a specific folder?How do you merge two Git repositories?How do I push a new local branch to a remote Git repository and track it too?How to add local jar files to a Maven project?How do you push a tag to a remote repository using Git?How to create a self-signed certificate with OpenSSLHow to convert .crt file into .pem formatHow to export base64 encoded x.509 certificate with private key without using OpenSSLconverting .cer to .pem returns error 'unable to load certificate'
Which likelihood function is used in linear regression?
What's this thing in a peltier cooler?
How do I explain to a team that the project they will work on for six months will certainly be cancelled?
Author changing name
What are the uses and limitations of Persuasion, Insight, and Deception against other PCs?
show stdout containing n with line breaks
Performance of a branch and bound algorithm VS branch-cut-heuristics
Was this a rapid SCHEDULED disassembly? How was it done?
Blocking people from taking pictures of me with smartphone
sed delete all the words before a match
Strangeness with gears
changing number of arguments to a function in secondary evaluation
Why couldn't soldiers sight their own weapons without officers' orders?
Ordering a word list
Want to draw this commutative diagram
Accidentals - some in brackets, some not
Non-OR journals which regularly publish OR research
What word can be used to describe a bug in a movie?
During the Space Shuttle Columbia Disaster of 2003, Why Did The Flight Director Say, "Lock the doors."?
How to vertically align the three columns of my table top, top, middle
Double blind peer review when paper cites author's GitHub repo for code
What does "sardine box" mean?
Do other countries guarantee freedoms that the United States does not have?
Look mom! I made my own (Base 10) numeral system!
How to add certificate for remote repository in JFrog Artifactory
How do I clone a subdirectory only of a Git repository?How do you clone a Git repository into a specific folder?How do you merge two Git repositories?How do I push a new local branch to a remote Git repository and track it too?How to add local jar files to a Maven project?How do you push a tag to a remote repository using Git?How to create a self-signed certificate with OpenSSLHow to convert .crt file into .pem formatHow to export base64 encoded x.509 certificate with private key without using OpenSSLconverting .cer to .pem returns error 'unable to load certificate'
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty margin-bottom:0;
Could you please help me to use JFrog Artifactory certificates feature. (Admin -> Certificates).
I want to add certificate for a maven repository (https://plugins.jenkins.io/repository)
Below are the steps I followed –
- Step1: Downloaded the certificate (DER encoded binary X.509) for this repository from chrome browser.
- Step2: Converted certificate extension from .cer to .pem. Directly converted extension from .cer to .pem and tried with open ssl also
openssl x509 -inform der -in certificate.cer -out certificate.pem
- Step3: Add new certificate via (Admin -> Certificates -> New -> Drag and dropped .pem file), Entered Certificate Alias name.
After clicking on Save, I am getting below error –
Certificate could not be added. Unable to read the provided PEM file. Missing private key or certificate.
Other important information –
- When I researched more on this error, I found jfrog is expecting certificate and private key both in .pem file. When I am downloading certificate from chrome I am getting only certificate but not private key.
https://jfrog.com/knowledge-base/how-to-resolve-the-certificate-could-not-be-added-unable-to-read-the-provided-pem-file-missing-key-or-certificate/ - I have tried the above steps with Base-64 encoded X.509 certificate also but results are same.
maven repository ssl-certificate artifactory
add a comment |
Could you please help me to use JFrog Artifactory certificates feature. (Admin -> Certificates).
I want to add certificate for a maven repository (https://plugins.jenkins.io/repository)
Below are the steps I followed –
- Step1: Downloaded the certificate (DER encoded binary X.509) for this repository from chrome browser.
- Step2: Converted certificate extension from .cer to .pem. Directly converted extension from .cer to .pem and tried with open ssl also
openssl x509 -inform der -in certificate.cer -out certificate.pem
- Step3: Add new certificate via (Admin -> Certificates -> New -> Drag and dropped .pem file), Entered Certificate Alias name.
After clicking on Save, I am getting below error –
Certificate could not be added. Unable to read the provided PEM file. Missing private key or certificate.
Other important information –
- When I researched more on this error, I found jfrog is expecting certificate and private key both in .pem file. When I am downloading certificate from chrome I am getting only certificate but not private key.
https://jfrog.com/knowledge-base/how-to-resolve-the-certificate-could-not-be-added-unable-to-read-the-provided-pem-file-missing-key-or-certificate/ - I have tried the above steps with Base-64 encoded X.509 certificate also but results are same.
maven repository ssl-certificate artifactory
Can you please explain your use case? What is the reason you are trying to add the certificate? The steps you are trying are for client certificate.
– gba
Apr 1 at 11:03
I am adding certificate so that when Artifactory access a remote repository, it will secure the connection using client certificate. I want to use it as a replacement of adding certificate in JVM Key store as it is easy to maintain via Artifactory.
– Gourav Arora
Apr 11 at 1:21
add a comment |
Could you please help me to use JFrog Artifactory certificates feature. (Admin -> Certificates).
I want to add certificate for a maven repository (https://plugins.jenkins.io/repository)
Below are the steps I followed –
- Step1: Downloaded the certificate (DER encoded binary X.509) for this repository from chrome browser.
- Step2: Converted certificate extension from .cer to .pem. Directly converted extension from .cer to .pem and tried with open ssl also
openssl x509 -inform der -in certificate.cer -out certificate.pem
- Step3: Add new certificate via (Admin -> Certificates -> New -> Drag and dropped .pem file), Entered Certificate Alias name.
After clicking on Save, I am getting below error –
Certificate could not be added. Unable to read the provided PEM file. Missing private key or certificate.
Other important information –
- When I researched more on this error, I found jfrog is expecting certificate and private key both in .pem file. When I am downloading certificate from chrome I am getting only certificate but not private key.
https://jfrog.com/knowledge-base/how-to-resolve-the-certificate-could-not-be-added-unable-to-read-the-provided-pem-file-missing-key-or-certificate/ - I have tried the above steps with Base-64 encoded X.509 certificate also but results are same.
maven repository ssl-certificate artifactory
Could you please help me to use JFrog Artifactory certificates feature. (Admin -> Certificates).
I want to add certificate for a maven repository (https://plugins.jenkins.io/repository)
Below are the steps I followed –
- Step1: Downloaded the certificate (DER encoded binary X.509) for this repository from chrome browser.
- Step2: Converted certificate extension from .cer to .pem. Directly converted extension from .cer to .pem and tried with open ssl also
openssl x509 -inform der -in certificate.cer -out certificate.pem
- Step3: Add new certificate via (Admin -> Certificates -> New -> Drag and dropped .pem file), Entered Certificate Alias name.
After clicking on Save, I am getting below error –
Certificate could not be added. Unable to read the provided PEM file. Missing private key or certificate.
Other important information –
- When I researched more on this error, I found jfrog is expecting certificate and private key both in .pem file. When I am downloading certificate from chrome I am getting only certificate but not private key.
https://jfrog.com/knowledge-base/how-to-resolve-the-certificate-could-not-be-added-unable-to-read-the-provided-pem-file-missing-key-or-certificate/ - I have tried the above steps with Base-64 encoded X.509 certificate also but results are same.
maven repository ssl-certificate artifactory
maven repository ssl-certificate artifactory
edited Apr 1 at 8:55
Dror Bereznitsky
17.1k3 gold badges39 silver badges51 bronze badges
17.1k3 gold badges39 silver badges51 bronze badges
asked Mar 27 at 7:38
Gourav AroraGourav Arora
111 bronze badge
111 bronze badge
Can you please explain your use case? What is the reason you are trying to add the certificate? The steps you are trying are for client certificate.
– gba
Apr 1 at 11:03
I am adding certificate so that when Artifactory access a remote repository, it will secure the connection using client certificate. I want to use it as a replacement of adding certificate in JVM Key store as it is easy to maintain via Artifactory.
– Gourav Arora
Apr 11 at 1:21
add a comment |
Can you please explain your use case? What is the reason you are trying to add the certificate? The steps you are trying are for client certificate.
– gba
Apr 1 at 11:03
I am adding certificate so that when Artifactory access a remote repository, it will secure the connection using client certificate. I want to use it as a replacement of adding certificate in JVM Key store as it is easy to maintain via Artifactory.
– Gourav Arora
Apr 11 at 1:21
Can you please explain your use case? What is the reason you are trying to add the certificate? The steps you are trying are for client certificate.
– gba
Apr 1 at 11:03
Can you please explain your use case? What is the reason you are trying to add the certificate? The steps you are trying are for client certificate.
– gba
Apr 1 at 11:03
I am adding certificate so that when Artifactory access a remote repository, it will secure the connection using client certificate. I want to use it as a replacement of adding certificate in JVM Key store as it is easy to maintain via Artifactory.
– Gourav Arora
Apr 11 at 1:21
I am adding certificate so that when Artifactory access a remote repository, it will secure the connection using client certificate. I want to use it as a replacement of adding certificate in JVM Key store as it is easy to maintain via Artifactory.
– Gourav Arora
Apr 11 at 1:21
add a comment |
2 Answers
2
active
oldest
votes
What you are doing is adding client certificate.
Meaning that when Artifactory will access a remote repository, it will secure the connection using client certificate.
If your problem is that Artifactory does not trust the certificate exposed by the remote repo (https://plugins.jenkins.io/repository) then you need to follow the directions here:
https://www.jfrog.com/confluence/display/RTF/Using+a+Self-Signed+Certificate
More explanations about the differences:
https://www.websecurity.symantec.com/security-topics/client-certificates-vs-server-certificates
Please elaborate a little bit more about the original problem you had, so we could understand if you are picking the right solution.
Good luck.
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
add a comment |
Your certificate probably came from a CSR (certificate request)?
You should have a private key within that CSR request file. Simply paste the output CER text (enclosed by ----- BEGIN CERTIFICATE ... -----END CERTIFICATE) - ie your issued certificate, a blank line, then the similar ---- BEGIN PRIVATE KEY ... ---- END PRIVATE KEY section from the CSR into a simple file called < whatever >.PEM and put that into jfrog. I told Jfrog just yesterday that this part is not clear, and could be expressed more simply in their wiki. What its complaining about is the lack of a PRIVATE KEY entry in the PEM. It took me a while to realise this, and where to get it from.
add a comment |
Your Answer
StackExchange.ifUsing("editor", function ()
StackExchange.using("externalEditor", function ()
StackExchange.using("snippets", function ()
StackExchange.snippets.init();
);
);
, "code-snippets");
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "1"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55372014%2fhow-to-add-certificate-for-remote-repository-in-jfrog-artifactory%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
What you are doing is adding client certificate.
Meaning that when Artifactory will access a remote repository, it will secure the connection using client certificate.
If your problem is that Artifactory does not trust the certificate exposed by the remote repo (https://plugins.jenkins.io/repository) then you need to follow the directions here:
https://www.jfrog.com/confluence/display/RTF/Using+a+Self-Signed+Certificate
More explanations about the differences:
https://www.websecurity.symantec.com/security-topics/client-certificates-vs-server-certificates
Please elaborate a little bit more about the original problem you had, so we could understand if you are picking the right solution.
Good luck.
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
add a comment |
What you are doing is adding client certificate.
Meaning that when Artifactory will access a remote repository, it will secure the connection using client certificate.
If your problem is that Artifactory does not trust the certificate exposed by the remote repo (https://plugins.jenkins.io/repository) then you need to follow the directions here:
https://www.jfrog.com/confluence/display/RTF/Using+a+Self-Signed+Certificate
More explanations about the differences:
https://www.websecurity.symantec.com/security-topics/client-certificates-vs-server-certificates
Please elaborate a little bit more about the original problem you had, so we could understand if you are picking the right solution.
Good luck.
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
add a comment |
What you are doing is adding client certificate.
Meaning that when Artifactory will access a remote repository, it will secure the connection using client certificate.
If your problem is that Artifactory does not trust the certificate exposed by the remote repo (https://plugins.jenkins.io/repository) then you need to follow the directions here:
https://www.jfrog.com/confluence/display/RTF/Using+a+Self-Signed+Certificate
More explanations about the differences:
https://www.websecurity.symantec.com/security-topics/client-certificates-vs-server-certificates
Please elaborate a little bit more about the original problem you had, so we could understand if you are picking the right solution.
Good luck.
What you are doing is adding client certificate.
Meaning that when Artifactory will access a remote repository, it will secure the connection using client certificate.
If your problem is that Artifactory does not trust the certificate exposed by the remote repo (https://plugins.jenkins.io/repository) then you need to follow the directions here:
https://www.jfrog.com/confluence/display/RTF/Using+a+Self-Signed+Certificate
More explanations about the differences:
https://www.websecurity.symantec.com/security-topics/client-certificates-vs-server-certificates
Please elaborate a little bit more about the original problem you had, so we could understand if you are picking the right solution.
Good luck.
answered Apr 1 at 11:23
gbagba
3,0273 gold badges18 silver badges34 bronze badges
3,0273 gold badges18 silver badges34 bronze badges
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
add a comment |
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
i added remote repository certificate into Admin - Security - Certificates. After adding i mapped certificate to remote repository in Edit repository - Advanced - SSL/TLS certificate But when i make the connection, it doesn't pick up the certificate from artifactory. It looks that it is still going into JVM Keystore for certificate and Keystore might contains the expired certificate for this repository which cause the connection to fail with error Connection to remote repository failed: PKIX path building failed:sun.security.provider.certpath.SunCertPathBuilderException: unable to find vali
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
Complete error message - Connection to remote repository failed: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
– Gourav Arora
Apr 11 at 1:35
add a comment |
Your certificate probably came from a CSR (certificate request)?
You should have a private key within that CSR request file. Simply paste the output CER text (enclosed by ----- BEGIN CERTIFICATE ... -----END CERTIFICATE) - ie your issued certificate, a blank line, then the similar ---- BEGIN PRIVATE KEY ... ---- END PRIVATE KEY section from the CSR into a simple file called < whatever >.PEM and put that into jfrog. I told Jfrog just yesterday that this part is not clear, and could be expressed more simply in their wiki. What its complaining about is the lack of a PRIVATE KEY entry in the PEM. It took me a while to realise this, and where to get it from.
add a comment |
Your certificate probably came from a CSR (certificate request)?
You should have a private key within that CSR request file. Simply paste the output CER text (enclosed by ----- BEGIN CERTIFICATE ... -----END CERTIFICATE) - ie your issued certificate, a blank line, then the similar ---- BEGIN PRIVATE KEY ... ---- END PRIVATE KEY section from the CSR into a simple file called < whatever >.PEM and put that into jfrog. I told Jfrog just yesterday that this part is not clear, and could be expressed more simply in their wiki. What its complaining about is the lack of a PRIVATE KEY entry in the PEM. It took me a while to realise this, and where to get it from.
add a comment |
Your certificate probably came from a CSR (certificate request)?
You should have a private key within that CSR request file. Simply paste the output CER text (enclosed by ----- BEGIN CERTIFICATE ... -----END CERTIFICATE) - ie your issued certificate, a blank line, then the similar ---- BEGIN PRIVATE KEY ... ---- END PRIVATE KEY section from the CSR into a simple file called < whatever >.PEM and put that into jfrog. I told Jfrog just yesterday that this part is not clear, and could be expressed more simply in their wiki. What its complaining about is the lack of a PRIVATE KEY entry in the PEM. It took me a while to realise this, and where to get it from.
Your certificate probably came from a CSR (certificate request)?
You should have a private key within that CSR request file. Simply paste the output CER text (enclosed by ----- BEGIN CERTIFICATE ... -----END CERTIFICATE) - ie your issued certificate, a blank line, then the similar ---- BEGIN PRIVATE KEY ... ---- END PRIVATE KEY section from the CSR into a simple file called < whatever >.PEM and put that into jfrog. I told Jfrog just yesterday that this part is not clear, and could be expressed more simply in their wiki. What its complaining about is the lack of a PRIVATE KEY entry in the PEM. It took me a while to realise this, and where to get it from.
answered yesterday
bigbadmousebigbadmouse
17313 bronze badges
17313 bronze badges
add a comment |
add a comment |
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f55372014%2fhow-to-add-certificate-for-remote-repository-in-jfrog-artifactory%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Can you please explain your use case? What is the reason you are trying to add the certificate? The steps you are trying are for client certificate.
– gba
Apr 1 at 11:03
I am adding certificate so that when Artifactory access a remote repository, it will secure the connection using client certificate. I want to use it as a replacement of adding certificate in JVM Key store as it is easy to maintain via Artifactory.
– Gourav Arora
Apr 11 at 1:21