Configuring server authentication

To configure SSL, you must first configure the server authentication by importing a CA certificate into the truststore.

1. Run the following command to import a CA certificate into a truststore:

   keytool -import -v -alias OACA -file CA.cer -keystore truststore.jks -storetype 
   JKS -storepass "ThePwd12"

   Note:

   The location for the truststore.jks and the solutions.properties files are in the ITDI_HOME\timsol directory.

   When you issue the keytool command to import the CA certificate, ensure that the truststore details match the solution.properties entries.

2. Set the following properties in the solutions.properties file:

   ## server authentication
   javax.net.ssl.trustStore=truststore.jks
   javax.net.ssl.trustStorePassword=ThePwd12
   javax.net.ssl.trustStoreType=jks

   The store password, ThePwd12, is for test purposes only.

   If the keystore properties are not set in the solution.properties file, use the same values as the truststore properties for these keystore entries:

   ## client authentication
   javax.net.ssl.keyStore=truststore.jks
   javax.net.ssl.keyStorePassword=ThePwd12
   javax.net.ssl.keyStoreType=jks