Jaspersoft Studio - connect to SSL enabled server

Products

• Clarity PPM SaaS
• Clarity PPM On Premise

Issue/Introduction

You cannot directly connect Jaspersoft Studio to SSL enabled Jaspersoft Server until you import the SSL Certificates into your studio installation directory.

Environment

Component : Clarity /Jaspersoft 

Cause

Jaspersoft Studio uses a specific holder for its security certificate.

Resolution

Import the certificate into Jaspersoft Studio Professional-7.1.0.final\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\lib\security directory. Then you will be able to make HTTPS calls to the server and connect successfully.

Additional Information

How to download the certificates from the client website.

<Chrome Browser> as example: 

1. Visit https://%HOST%.ondemand.ca.com 
2. Hit F12 (Developer Tools)
3. Click the Security tab
4. Click on View Certificate and navigate to the certification path to view all required certificates that are required to make the connection (for some customers root and intermediate will be different from the ones from OD)
5. On the Pop-up Window -> Click Details Tab -> then Copy to File -> Click Next and take the default option (DER) 
6. Give it a filename <example: ondemand.cer>
7. Save it to a folder
8. Close any Studio instance that is open and running
9. Open the studio installation directory in command prompt (folder similar to <local jaspersoft installation directory>\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\bin)
10. Run the following command:
    keytool -import -alias <alliasname> -keystore "<local jaspersoft installation directory>\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\lib\security\cacerts" -file <path of the certificate>\abc.cer
    
    

    <aliasname>: Any name that you want to give for the certificate

    <path of the certificate> : Location where your certificates are saved on your desktop

    abc.cer: Name of the certificate

11. Enter password as "changeit"

12. Run the above command for all the certificates

13. Open Studio and connect to Jasper Server

Examples

Add Keystore:

"C:\Program Files\TIBCO\Jaspersoft Studio Professional-7.1.0.final\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\bin\keytool" -import -keystore "C:\Program Files\TIBCO\Jaspersoft Studio Professional-7.1.0.final\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\lib\security\cacerts" -file "C:\certs\ca_on_demand2.cer" -alias ca_on_demand -trustcacerts

Delete keystore:

"C:\Program Files\TIBCO\Jaspersoft Studio Professional-7.1.0.final\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\bin\keytool" -delete -keystore "C:\Program Files\TIBCO\Jaspersoft Studio Professional-7.1.0.final\features\jre.win32.win32.x86_64.feature_1.8.0.u151\jre\lib\security\cacerts" -alias ca_on_demand -storepass changeit

Create a backup copy of the default certs file

For example: Copy the file in jre\lib\security\cacerts to cacerts.bak

This file can copied back in place if necessary