如果jenkins目錄不在/var/lib/jenkins构蹬，將命令中的該路徑替換為正確路徑即可惠猿。
將已有證書及jenkins幾個域名證書導(dǎo)入
# 將java證書復(fù)制到j(luò)enkins目錄
mkdir /var/lib/jenkins/keystore/
cp $JAVA_HOME/jre/lib/security/cacerts /var/lib/jenkins/keystore/
# 導(dǎo)入
while read i
do
echo "$i"
openssl s_client -showcerts -connect $i:443 < /dev/null 2> /dev/null | openssl x509 -outform PEM > ~/root_ca.pem
keytool -delete -alias $i -keystore /var/lib/jenkins/keystore/cacerts
# 導(dǎo)入證書胁艰，如果提示“輸入密鑰庫口令”漾岳，試試默認(rèn)的"changeit"
keytool -noprompt -import -alias $i -keystore /var/lib/jenkins/keystore/cacerts -file ~/root_ca.pem -storepass changeit
done <<< 'jenkins.io
get.jenkins.io
updates.jenkins.io
ftp.yz.yamagata-u.ac.jp
mirror.gruenehoelle.nl
ftp.halifax.rwth-aachen.de
mirror.xmission.com
ftp-chi.osuosl.org
archives.jenkins.io
mirrors.tuna.tsinghua.edu.cn'
修改 /etc/sysconfig/jenkins腋寨，指定證書目錄
JENKINS_JAVA_OPTIONS="-Djava.awt.headless=true -Djavax.net.ssl.trustStore=/var/lib/jenkins/keystore/cacerts"
重啟jenkins
service jenkins restart
