Configuring PUB to validate certificates of server

You can configure PUB to validate the certificates of the server. For the document generation URI to any other communication, PUB must validate the certificates of the server.

To add the certificates of the server, complete the following steps:

1. In Launcher.ini and Studio.ini in Document Studio and Launcher and Server.startup file in Publishing Document Builder, set the -Dcom.ibm.engineering.pub.certification_validation=true.
2. Export the certificate:
   1. Add URI in browser.
   2. Click the padlock icon in the web browser's URL bar.
   3. Click Connection is secure and then click Certificate is valid.
   4. On the Certificate Viewer > Details tab, click Export.
3. Import the certificate in cacerts at one of the following locations:
   1. RPE_HOME > jre > lib > security cacerts

      To import certificates in cacerts, run the following command:

      keytool -import -noprompt -trustcacerts -alias ${ANY_NAME} -file ${pem file path} -keystore ${keystore path} -storepass changeit
   2. Custom Path
      If you are adding the file to the custom path, add the following flags in the properties file:

      • -Djavax.net.ssl.keyStoreType
      • -Djavax.net.ssl.keyStore
      • -Djavax.net.ssl.keyStorePassword

      Note: If the flag is enabled in Publishing Document Builder, then add the certificate of Publishing Document Builder in cacerts.