Edit

Add third-party service certificates to Truststore

Java truststore

1. Import the certificate to the truststore:

   $KEYTOOL -keystore $CASTORE -import -file $CERT_CRT -alias ALIAS
   

   S3 example:

   ${INSTALL_DIR}/java/bin/keytool -keystore ${INSTALL_DIR}/java/jre/lib/security/cacerts -import -file /opt/wf_installer/certificates/db.crt -alias db
   

2. Enter your keystore password:

   • Java: The initial password of the cacerts keystore file is changeit.
   • Tomcat: The initial password of the tomcat.keystore and tomcat.truststore files is password.

   If the key already exists or it is not correct, delete that alias:

   ${INSTALL_DIR}/java/bin/keytool -delete -alias db -keystore ${INSTALL_DIR}/java/jre/lib/security/cacerts
   

3. Restart related services.

   wfmanager SERVICE_NAME restart
   

Nginx

1. Add *.key and *.pem to the Nginx location:

   ${INSTALL_DIR}/nginx/ssl
   

2. Restart Nginx:

   wfmanager nginx restart