Import E2EAdapter Public Server CA into SMU

The SMU server and the E2E agent need to import the E2E adapter server CA (public key only) into its truststore jks file.

Procedure

Copy the z/OS sequential file HLQ.CERTS.E2EADAPT in binary format to a USS file. Use the following command to save the binary file:
```
cp  "//'HLQ.CERTS.E2EADAPT'"  ./E2EAdapterCA.cer
```

Transfer the binary file to the system where SMU resides. Import the certificate into SMU’s truststore smu.truststore.jks.

keytool -importcert
  -noprompt
  -alias E2EAdapterCA
  -file  E2EAdapterCA.cer  
  -keystore  smu.truststore.jks
  -storepass  passphrase

Import the public key from the SMU certificate smuCA.cer into SMU’s truststore.

keytool -importcert
  -noprompt
  -alias smuca
  -file smuCA.cer
  -keystore  smu.truststore.jks
  -storepass  passphrase

Verify the contents of SMU truststore by using the following command. Check if there are two entries of trustedCertEntry type for the smuca and the E2EAdapterCA.

keytool -list -keystore SMU.truststore.jks -storepass passphrase -v

Keystore type: JKS 
Keystore provider: SUN 

Your keystore contains two entries.

Alias name: e2eadapterca 
Creation date: Aug 13, 2019 
Entry type: trustedCertEntry

Owner: CN=CA for E2EAdapter, OU=E2EAdapter, O=IBM, C=US 
Issuer: CN=CA for E2EAdapter, OU=E2EAdapter, O=IBM, C=US 
Serial number: 0
 
Valid from: Mon Aug 12 00:00:00 CEST 2019 until: Mon Dec 31 22:59:59 CET 2029 
Certificate  fingerprints: 
    MD5:     31:F0:C0:9E:96:8E:92:FA:F3:BC:AE:22:3F:35:89:4F
    SHA1:    FC:C2:56:0E:B0:8C:D9:6F:EB:33:B9:6C:07:FA:8E:83:1A:73:93:1A
    Signature algorithm name: SHA1withRSA 
    Version: 3

Extensions:

#1: ObjectId: 2.5.29.15 Criticality=true 
KeyUsage [
 Key_CertSign
 Crl_Sign
]

#2: ObjectId: 2.5.29.19 Criticality=true 
BasicConstraints:[
 CA:true 
 PathLen:2147483647
]

#3: ObjectId: 2.5.29.14 Criticality=false 
SubjectKeyIdentifier  [
KeyIdentifier [
0000: 86 AF FA 63 AE E6 8F D0 97 3C B8 F7 BC 11 54 E0 ...c.....<....T.
0010: B2 8B FC 56	             ...V
]
]

#4: ObjectId: 2.16.840.1.113730.1.13 Criticality=false

*******************************************
*******************************************
Alias name: smuca 
Creation date: Aug 8, 2019
Entry type: trustedCertEntry

Owner: CN=SMU.host.com, OU=E2EAdapterClient, O=IBM, C=US 
Issuer: CN=SMU.host.com, OU=E2EAdapterClient, O=IBM, C=US 
Serial number: 5d4c1535
Valid from: Thu Aug 08 14:27:33 CEST 2019 until: Tue May 03 14:27:33 CEST 2022 
Certificate  fingerprints:
    MD5:     B7:BE:A4:75:6F:68:01:D3:D1:B9:78:88:A4:01:0C:1E
    SHA1:    C1:A1:7F:72:9F:0A:16:09:BC:B0:F6:C6:3E:0B:26:06:29:10:05:9C
    Signature algorithm name: SHA1withRSA 
    Version: 3

*******************************************
*******************************************