anchor.diff:      keytool -trustcacerts -keystore ${KEYSTORE} -storepass changeit -noprompt -importcert -alias letsencryptauthorityx1 -file /tmp/lets-encrypt-x1-cross-signed.der && \
       keytool -trustcacerts -keystore ${KEYSTORE} -storepass changeit -noprompt -importcert -alias letsencryptauthorityx2 -file /tmp/lets-encrypt-x2-cross-signed.der && \
       keytool -trustcacerts -keystore ${KEYSTORE} -storepass changeit -noprompt -importcert -alias letsencryptauthorityx3 -file /tmp/lets-encrypt-x3-cross-signed.der && \
  -    keytool -trustcacerts -keystore ${KEYSTORE} -storepass changeit -noprompt -importcert -alias letsencryptauthorityx4 -file /tmp/lets-encrypt-x4-cross-signed.der && \
  +    keytool -trustcacerts -keystore ${KEYSTORE} -storepass changeit -noprompt -importcert -alias letsencryptauthorityx4 -file /tmp/lets-encrypt-x4-cross-signed.der
   
   # install (upgrade) new dockerized toolbox
   RUN wget -q -O /tmp/dockerize.tar.gz https://github.com/jwilder/dockerize/releases/download/${DOCKERIZE_VERSION}/dockerize-alpine-linux-amd64-$DOCKERIZE_VERSION.tar.gz && \
  
positive.code:     JIRA_HOME=/var/atlassian/jira \
      JIRA_INSTALL=/opt/jira \
      JIRA_SCRIPTS=/usr/local/share/atlassian \
      JVM_MYSQL_CONNECTOR_URL="http://dev.mysql.com/get/Downloads/Connector-J" \
      DOWNLOAD_URL="https://www.atlassian.com/software/jira/downloads/binary"
  
  ENV JAVA_HOME=$JIRA_INSTALL/jre
  ENV PATH=$PATH:$JAVA_HOME/bin \
      LANG=${ISO_LANGUAGE}_${ISO_COUNTRY}.UTF-8
  
  COPY scripts/* ${JIRA_SCRIPTS}/
  
negative.code:             -S ${CONTAINER_USER}
  
  # install/setup keystore using host based letsencrypt CA (for growd sso)
  RUN export KEYSTORE=${JAVA_HOME}/lib/security/cacerts && \
      wget -q -O /SSLPoke.class https://confluence.atlassian.com/kb/files/779355358/779355357/1/1441897666313/SSLPoke.class && \
      wget -q -P /tmp/ https://letsencrypt.org/certs/letsencryptauthorityx1.der && \
      wget -q -P /tmp/ https://letsencrypt.org/certs/letsencryptauthorityx2.der && \
  