Invalid custom CA certificate store location in SonarQube 9.9

[suprovsky (Radosław Serba)]

Hey, so I’m using SonarQube hosted on Docker and I connect to two LDAP servers over SSL/TLS.
In the latest release you have changed the default location of a cacerts file being used for Java processes, meaning if anybody does the upgrade from previous versions, where I did that from 9.8, the installation will fail after the database upgrade.

Install the server

I believe it would be more beneficial if you’d point the right file in the documentation, as this was what was changed between these two releases:

docker run -d --name sonarqube -v /path/to/your/cacerts.truststore:/usr/lib/jvm/java-11-openjdk/lib/security/cacerts:ro -p 9000:9000 sonarqube 

while actual cacerts in the container is /opt/java/openjdk/lib/security/cacerts in 9.9. The old location in 9.8 and earlier was /etc/ssl/certs/java/cacerts.

[Colin]

Hey there.

Thanks a lot for the feedback. We’re checking that the change in paths was intentional and how to best document it if so.

[tony.briget]

Hi @suprovsky,

Thanks a lot for the suggestion! We fixed the path in the example, and the 9.9 LTS documentation now includes a release upgrade note that mentions this change.