Metabase includes SSL variables for setting:
MB_JETTY_SSL_PORT
MB_JETTY_SSL_KEYSTORE
MB_JETTY_SSL_KEYSTORE_PASSWORD
But as far as I can tell there is no way to set Jetty’s KeystoreType. Is Metabase simply limiting keystore types to JKS? I have an existing PKCS12 I’d like to use and maintain.
Thanks. I decided to just create a new store and keys for development purposes. I’ll probably do the same for production. But now I’m getting invalid password even thought keytool -list validates my keystore password. I’m giving it a few hours more and will just use a proxy if I can’t figure it out.
Edit: Okay it’s working now. The original issue is still happening (can’t set keystore type), but the password error was happening because I had set the keystore password in quotes- as in:
SET MB_JETTY_SSL_KEYSTORE_PASSWORD=“my_pwd123”
when it needs to be:(no quotes around password)
SET MB_JETTY_SSL_KEYSTORE_PASSWORD=my_pwd123