Edit

Add third-party service certificates to Truststore

Java truststore

1. Import the certificate to the truststore.

   $KEYTOOL -keystore $CASTORE -import -file $CERT_CRT -alias ALIAS
   

   DB example:

   <INSTALL_DIR>/java/bin/keytool -keystore <INSTALL_DIR>/java/jre/lib/security/cacerts -import -file /opt/wf_installer/certificates/db.crt -alias db
   

2. You will be asked to enter the keystore password.

   Java: The initial password of the cacerts keystore file is changeit.

   If the key already exists and/or it's not correct, so you need to delete that alias:

   <INSTALL_DIR>/java/bin/keytool -delete -alias db -keystore <INSTALL_DIR>/java/jre/lib/security/cacerts
   

3. Restart related services.

   wfmanager SERVICE_NAME restart
   

Nginx

1. Add *.key and *.pem to the Nginx location.

   <INSTALL_DIR>/nginx/ssl
   

2. Restart Nginx.

   wfmanager nginx restart