Add third-party service certificates to Truststore

Java truststore

$KEYTOOL -keystore $CASTORE -import -file $CERT_CRT -alias ALIAS

Database example:

<INSTALL_DIR>/java/bin/keytool -keystore <INSTALL_DIR>/java/jre/lib/security/cacerts -import -file /opt/wf_installer/certificates/db.crt -alias db

You are asked to enter a keystore password.

Java: the initial password of the cacerts keystore file is changeit.

If the key already exists or it's not correct, delete the alias:

<INSTALL_DIR>/java/bin/keytool -delete -alias db -keystore <INSTALL_DIR>/java/jre/lib/security/cacerts

Then, restart related services.

wfmanager SERVICE_NAME restart

Add *.key and *.pem to the nginx location.

<INSTALL_DIR>/nginx/ssl

Restart Nginx.

wfmanager nginx restart