Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. The default password for the JVM TrustStore is “changeit”, and you should change it to a new password:

    Code Block
    languagebash
    themeRDark
    Keytoolkeytool -storepasswd -keystore /app/java/jre/lib/security/cacerts 
    
    Enter keystore password:  <old password>
    New keystore password: <new password>
    Re-enter new keystore password: <new password>


  2. Import the LDAP / CA certificate to the JVM trustStoreTrustStore. You can either import a self signed certificate, or the CA certificate that signed the LDAP certificate.

    Code Block
    languagebash
    themeRDark
    Keytoolkeytool -import -v -noprompt -trustcacerts -file <certificate file location > -keystore /app/java/jre/lib/security/cacerts -storepass <key store password>


  3. Make sure you use ldaps:// prefix and SSL ports in the LDAP configuration script properties parameters file.

...