JetBrains SpaceCode Preview Help

SSL Keystores

SpaceCode supports uploading SSL keystores. An SSL client key contained in a keystore is used to identify SpaceCode as a client when connecting to an external server. Adding a server certificate as trusted means that you trust the server that holds a respective certificate.

The uploaded SSL keystores can be used to configure secure connection with supported third-party authentication providers.

Upload an SSL keystore:

  1. On the top right, click your avatar and choose Administration

  2. On the left sidebar menu, choose SSL Keystores.

  3. Click Add keystore.

  4. Enter a name for the new keystore.

  5. Select a file that contains the keystore. Browse for the file or drag-and-drop it into the field.

    • The keystore must be in PKCS12 (.p12) format.

    • The keystore must be password protected.

    • The keystore must contain a single entry.

  6. Click Add to upload the selected file to SpaceCode.

Added keystores are enabled by default.

Disable and enable keystores:

  1. On the top right, click your avatar and choose Administration

  2. On the left sidebar menu, choose SSL Keystores.

  3. Locate the keystore in the list and click a corresponding button: Active or Inactive.

Delete a keystore:

  1. On the top right, click your avatar and choose Administration

  2. On the left sidebar menu, choose SSL Keystores.

  3. Locate the keystore in the list and click delete-icon next to it.

Generate a keystore File

There are several tools that let you create SSL keys and certificates in PKCS12 format. Here is how to create SSL key with the OpenSSL toolkit:

  1. Generate a new 2048-bit RSA key with password protection:

    openssl genrsa -des3 -out SpaceCode.key 2048
  2. Generate a certificate request for the generated key:

    openssl req -new -key SpaceCode.key -out SpaceCode.csr
  3. Generate a certificate:

    openssl x509 -req -days 365 -in SpaceCode.csr -signkey SpaceCode.key -out SpaceCode.crt
  4. Package the key and the certificate in a PKCS12 file:

    openssl pkcs12 -export -out SpaceCode.p12 -inkey SpaceCode.key -in SpaceCode.crt -certfile SpaceCode.crt
    • You now have a PKCS12 keystore (SpaceCode.p12 in the example) that is ready for upload to SpaceCode.

Last modified: 11 June 2024