Configure trust on the server

Configure trust on the OpenText Core Software Delivery Platform server when you connect to any remote server (such as a database server, an LDAP server, license sharing with OpenText Application Quality Management, and so on) over a secure channel.

To configure trust:

1. Obtain the certificate of the root and any intermediate Certificate Authority that issued the remote server certificate.

2. Import each certificate into the OpenText Core Software Delivery Platform java truststore using a keytool command.

   • Locate your <java_home> directory. It is usually under the user/lib directory (Linux) or C:\Program Files\java (Windows) but may be different for your environment. One way to check the location of the <java_home> directory is to check the environment information settings in the wrapper.log file.

     Linux Example:/usr/lib/jvm/java-1.8.0-openjdk-1.8.0.131-11.b12.el7.x86_64/jre

     Windows Example:C:\Program Files\java\<jdkversion>\jre

   • Locate your keystore cacerts file, which is usually here: <java_home>/jre/lib/security/cacerts

   • Import each certificate.

     Linux Example:

     cd <java_home>/bin

     ./keytool -import -trustcacerts -alias <CA> -file <path to the CA certificate file> -keystore ../lib/security/cacerts
     
     

     Windows Example:

     cd <java_home>\bin

     .\keytool -import -trustcacerts -alias <CA> -file <path to the CA certificate file> -keystore ..\lib\security\cacerts
     

3. In the octane.conf file, enter the cacerts password in the java-default-trust-store-password parameter.

4. If the OpenText Core Software Delivery Platform service (octane) is running, restart it.

Back to top