Edit

Add third-party service certificates to Truststore

Java truststore

1. Import the certificate to the truststore.

   $KEYTOOL -keystore $CASTORE -import -file $CERT_CRT -alias ALIAS
   

   S3 example:

   ${INSTALL_DIR}/java/bin/keytool -keystore ${INSTALL_DIR}/java/jre/lib/security/cacerts -import -file /opt/wf_installer/certificates/db.crt -alias db
   

2. You will be asked to enter keystore password.

   Java: The initial password of the "cacerts" keystore file is "changeit".

   If the key already exists and/or it's not correct, so you need to delete that alias:

   ${INSTALL_DIR}/java/bin/keytool -delete -alias db -keystore ${INSTALL_DIR}/java/jre/lib/security/cacerts
   

3. Restart related services.

   wfmanager SERVICE_NAME restart
   

Nginx

1. Add *.key and *.pem to the nginx location.

   ${INSTALL_DIR}/nginx/ssl
   

2. Restart nginx

   wfmanager nginx restart