Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

In SSL handshake, the client needs to verify the certificate presented by the server. For this purpose, the client usually stores the certificates it trusts, in a trust store. For more information, see Adding the public key to client-truststore.jks, which is in the WSO2 Carbon documentation.

Step 3 - Update the required configuration files

  1. Update the carbon.xml file, which is in the <PRODUCT_HOME>/repository/conf directory, with the location of the newly created Keystore.

    Code Block
    <KeyStore>
                <!-- Keystore file location-->
                <Location>${carbon.home}/repository/resources/security/mykeystore.jks</Location>
                <!-- Keystore type (JKS/PKCS12 etc.)-->
                <Type>JKS</Type>
                <!-- Keystore password-->
                <Password>mypkpassword</Password>
                <!-- Private Key alias-->
                <KeyAlias>mycert</KeyAlias>
                <!-- Private Key password-->
                <KeyPassword>mypkpassword</KeyPassword>
        </KeyStore>
    
    
    <RegistryKeyStore>
                <!-- Keystore file location-->
                <Location>${carbon.home}/repository/resources/security/mykeystore.jks</Location>
                <!-- Keystore type (JKS/PKCS12 etc.)-->
                <Type>JKS</Type>
                <!-- Keystore password-->
                <Password>mypkpassword</Password>
                <!-- Private Key alias-->
                <KeyAlias>mycert</KeyAlias>
                <!-- Private Key password-->
                <KeyPassword>mypkpassword</KeyPassword>
     </RegistryKeyStore>
  2.