Edit

Add third-party services' certificates to Truststore

Java Truststore

1. Import the certificate to the Truststore:

   $KEYTOOL -keystore $CASTORE -import -file $CERT_CRT -alias ALIAS
   

   DB example:

   <INSTALL_DIR>/java/bin/keytool -keystore <INSTALL_DIR>/java/jre/lib/security/cacerts -import -file /opt/wf_installer/certificates/db.crt -alias db
   

2. Enter the keystore password.

   Java: The initial password of the "cacerts" keystore file is "changeit".

   If the key already exists and/or it's not correct, so you need to delete that alias:

   <INSTALL_DIR>/java/bin/keytool -delete -alias db -keystore <INSTALL_DIR>/java/jre/lib/security/cacerts
   

3. Restart related services. For more details, see the product architecture.

   wfmanager SERVICE_NAME restart
   

Nginx

1. Add *.key and *.pem to the Nginx location.

   <INSTALL_DIR>/nginx/ssl
   

2. Restart Nginx.

   wfmanager nginx restart