Skip to end of metadata
Go to start of metadata

You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 5 Next »

In case of SSL certificate errors, you may have to load certificate files in Java keystore.

Download the Certificate

Launch the Service or Application URL in browser and downloaded certificate .cer file, receive it from your infrastructure team, or generate a new certificate on the target system.

Install the Certificate

either into cacerts

You can load it directly into your java cacerts, but this will be removed when Java is upgraded. The next session shows that approach, which is the easiest to use, but may not be the best option for your situation.

  1. First figure out JDK used by FlexDeploy and/or Endpoint as applicable.

    1. For example, cd /u01/jdk1.8.0_60

  2. cd jre/lib/security/

  3. Copy .cer file in this folder.  

  4. cp cacerts cacerts.bak

  5. ../../bin/keytool -importcert -keystore cacerts -alias <alias name> -file <certificate file name>

  6. Type password (likely “changeit”)

Or into another keystore (recommended)

Alternatively, make a new keystore to hold it, or add it to an existing alternate keystore.

  1. cd to FLEXDEPLOY_HOME

  2. Import the keystore into a new or existing keystore

    1. <JAVA_HOME>/bin/keytool -importcert -keystore flexdeploy.keystore -alias <alias name> -file <certificate file name>

  3. Reference the keystore from the setenvoverride.sh file in the apache-tomcat-flexdeploy/bin folder.

    1. FLEXAGON_FD_JAVA_ARGS=" -Djavax.net.ssl.keyStore=/<path-to-the-keystore-file here> -Djavax.net.ssl.keyStorePassword=<pw here> ”

    2. If you had other Java args, make sure that they are separated with spaces.

  • No labels