Answers: <p>We've configured the plugin properly (we're able to invoke acunetix from jenkins although we're having issues getting the report copied into the Jenkins workspace). The issue he might have run into is that you might have more than one jre installed and you have to register the certificate on the keystore JRE that Jenkins is using (you can check which one is being used by jenkins by looking at the "<code>&lt;executable&gt;</code>" tag in the <code>jenkins.xml</code> config file)</p>
  
  <p>In a default installation the jre being used by jenkins and its keystore are located inside the jenkins folder: <code>.\jenkins\jre\bin\keytool</code> and <code>.\jenkins\jre\lib\security\cacerts</code></p>
  
  <p>With this configuration, you can verify if the certificate is in the keystore by using the command:
  <code>keytool -list -keystore "jenkins\jre\lib\security\cacerts"</code></p>
  
Answers: CC BY-SA 4.0
Answers: 2018-06-20T19:11:36.683Z
Answers: 2018-09-06T09:03:56.930Z
Answers: 2018-09-06T09:03:56.930Z
Answers: Milena
Body: <p>The first of all, thank you for reading my question, I really appreciate it! I am trying to integrate jenkins and acunetix (a vulnerability scanner software), but it seems to be near impossible...My situation is as follows:</p>
  
  <p>There are two machines, a debian 9 machine [DEB] and a win10 machine [WIN]. In [WIN] I installed Acunetix v11 and jenkins in [DEB], and I configured acunetix to be accessible from outside (following this tutorial: <a href="https://www.acunetix.com/blog/docs/use-acunetix-host-localhost/" rel="nofollow noreferrer">https://www.acunetix.com/blog/docs/use-acunetix-host-localhost/</a>). After that, I followed another tutorial (<a href="https://www.acunetix.com/blog/docs/install-acunetix-root-certificate-another-computer/" rel="nofollow noreferrer">https://www.acunetix.com/blog/docs/install-acunetix-root-certificate-another-computer/</a>) to connect jenkins with acunetix. I managed to access to acunetix webpage from [DEB] via web (Not issues in network or configuration in that sense). </p>
  
  <p>However, I could not connect with acunteix from jenkins despite the fact I followed every single step explained in acunetix web page. I got this error: "Please add the Acunetix scanner certificate to Java CA store" when I tested the connection from jenkins (obviously, acunetix plugin is installed in jenkins). I checked that the certificate obtained from acunetix installation (in [WIN]) "ca.cer" was correctly added in the keystore of [DEB]. Then, I made a custom keystore to be used by jenkins (as it is explained in this other tutorial: <a href="https://support.cloudbees.com/hc/en-us/articles/203821254-How-to-install-a-new-SSL-certificate-" rel="nofollow noreferrer">https://support.cloudbees.com/hc/en-us/articles/203821254-How-to-install-a-new-SSL-certificate-</a>) and I got the same result...At that time, I thought that maybe something was wrong in [DEB], so I used another windows 10 machine [WIN2] to repeat the process...and I got the same result... The acunetix certificate was also included in the OS apart from java keystore in all cases.</p>
  
  <p>My company contacted Acunetix support about this issue but no solution has been provided so far... Currently, we don't what to do right now... Have you dealt with this? Have you found a solution? </p>
  
  <p>Thank you in advance, mates!</p>
  
  <p>See you!</p>
  
Comments: CC BY-SA 3.0
Comments: 2018-01-18T16:50:59.247Z
Comments: You've tried this with other servers, so this is not an explicit issue with Jenkins?
Comments: Preston Martin
Comments: CC BY-SA 3.0
Comments: 2018-01-18T16:57:31.380Z
Comments: Hi PrestonM, thank you for your interest in this! Acunetix license is linked to MAC address of the machine, but we can try that to discard acunetix server issues.
Comments: 4LB3R70
Comments: CC BY-SA 3.0
Comments: 2018-01-18T19:30:39.577Z
Comments: I would see if you can connect acunetix to a non-jenkins server to see which system is causing the issue.
Comments: Preston Martin
Comments: CC BY-SA 3.0
Comments: 2018-01-19T07:20:32.517Z
Comments: mmm I see your point, I do not know how to do that but it's something that might be interesting to explore too...
Comments: 4LB3R70
Comments: CC BY-SA 3.0
Comments: 2018-01-19T17:30:42.120Z
Comments: How are you connecting to acunetix from Jenkins? Are you making HTTP requests from within a job? Is some Jenkins plugin responsible for communicating with the acunetix service? Something else?
Comments: jayhendren
Comments: CC BY-SA 3.0
Comments: 2018-01-22T15:30:17.310Z
Comments: Hi jayhendren, I am using a jenkins plugin, you can find more information here: https://www.acunetix.com/blog/web-security-zone/acunetix-jenkins-plugin/
Comments: 4LB3R70
Comments: CC BY-SA 3.0
Comments: 2018-01-22T16:31:23.473Z
Comments: Well, I installed acunetix on another server (windows server sk12)[WIN3], and I repeated the whole process... same result..."Please add the Acunetix scanner certificate to Java CA store". In this test Iused [WIN2] and [WIN3].
Comments: 4LB3R70
Tags: <jenkins><jenkins-plugins><security><integration><devsecops>
Title: Issue integrating acunetix with jenkins
UserDisplayName: 4LB3R70
ThreadText: # Issue integrating acunetix with jenkins
  
  (Asked by: username_0 on 2018-01-18)
  
  The first of all, thank you for reading my question, I really appreciate it! I am trying to integrate jenkins and acunetix (a vulnerability scanner software), but it seems to be near impossible...My situation is as follows:
  
  There are two machines, a debian 9 machine [DEB] and a win10 machine [WIN]. In [WIN] I installed Acunetix v11 and jenkins in [DEB], and I configured acunetix to be accessible from outside (following this tutorial: <https://www.acunetix.com/blog/docs/use-acunetix-host-localhost/>). After that, I followed another tutorial (<https://www.acunetix.com/blog/docs/install-acunetix-root-certificate-another-computer/>) to connect jenkins with acunetix. I managed to access to acunetix webpage from [DEB] via web (Not issues in network or configuration in that sense).
  
  However, I could not connect with acunteix from jenkins despite the fact I followed every single step explained in acunetix web page. I got this error: "Please add the Acunetix scanner certificate to Java CA store" when I tested the connection from jenkins (obviously, acunetix plugin is installed in jenkins). I checked that the certificate obtained from acunetix installation (in [WIN]) "ca.cer" was correctly added in the keystore of [DEB]. Then, I made a custom keystore to be used by jenkins (as it is explained in this other tutorial: <https://support.cloudbees.com/hc/en-us/articles/203821254-How-to-install-a-new-SSL-certificate->) and I got the same result...At that time, I thought that maybe something was wrong in [DEB], so I used another windows 10 machine [WIN2] to repeat the process...and I got the same result... The acunetix certificate was also included in the OS apart from java keystore in all cases.
  
  My company contacted Acunetix support about this issue but no solution has been provided so far... Currently, we don't what to do right now... Have you dealt with this? Have you found a solution?
  
  Thank you in advance, mates!
  
  See you!
  
  **Tags:** jenkins, jenkins-plugins, security, integration, devsecops
  
  > **Comments:**
  > **username_1**: You've tried this with other servers, so this is not an explicit issue with Jenkins?  
  > **username_0**: Hi PrestonM, thank you for your interest in this! Acunetix license is linked to MAC address of the machine, but we can try that to discard acunetix server issues.  
  > **username_1**: I would see if you can connect acunetix to a non-jenkins server to see which system is causing the issue.  
  > **username_0**: mmm I see your point, I do not know how to do that but it's something that might be interesting to explore too...  
  > **username_2**: How are you connecting to acunetix from Jenkins? Are you making HTTP requests from within a job? Is some Jenkins plugin responsible for communicating with the acunetix service? Something else?  
  > **username_0**: Hi username_2, I am using a jenkins plugin, you can find more information here: https://www.acunetix.com/blog/web-security-zone/acunetix-jenkins-plugin/  
  > **username_0**: Well, I installed acunetix on another server (windows server sk12)[WIN3], and I repeated the whole process... same result..."Please add the Acunetix scanner certificate to Java CA store". In this test Iused [WIN2] and [WIN3].  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_3 on 2018-06-20. Score: 1
  
  We've configured the plugin properly (we're able to invoke acunetix from jenkins although we're having issues getting the report copied into the Jenkins workspace). The issue he might have run into is that you might have more than one jre installed and you have to register the certificate on the keystore JRE that Jenkins is using (you can check which one is being used by jenkins by looking at the "`<executable>`" tag in the `jenkins.xml` config file)
  
  In a default installation the jre being used by jenkins and its keystore are located inside the jenkins folder: `.\jenkins\jre\bin\keytool` and `.\jenkins\jre\lib\security\cacerts`
  
  With this configuration, you can verify if the certificate is in the keystore by using the command:
  `keytool -list -keystore "jenkins\jre\lib\security\cacerts"`
  
  
  ---
  
  