Add third-party service certificates to truststore
Java truststore
- Import the certificate to the truststore.
$KEYTOOL -import -alias ALIAS -file $CERT_PEM -keystore $TRUSTSTORE -storepass PASSWORD
S3 example:
${INSTALL_DIR}/lib/jdk1.8.0_101/bin/keytool -keystore ${INSTALL_DIR}/lib/jdk1.8.0_101/jre/lib/security/truststore -importcert -alias s3 -file ${INSTALL_DIR}/apps/ssl/s3_certificate.pem
- You will be asked to enter keystore password. If the key already exists and/or it is not correct, you need to delete that alias:
${INSTALL_DIR}/lib/jdk1.8.0_101/bin/keytool -delete -alias s3 -keystore ${INSTALL_DIR}/lib/jdk1.8.0_101/jre/lib/security/truststore
- Restart wfmanager.
wfmanager restart java_application_name
Nginx
- Add *.key and *.pem to the nginx location.
/opt/workfusion/apps/nginx/etc/ssl/wf/
- Restart nginx.
nginx-service restart