Changing Default Keystores

In order to change the default keystore, a keystore must have been generated using the command below:

keytool -genkey -alias box1keystore -keyalg RSA -keystore box1keystore.jks

1. In the <MB_HOME>/repository/resources/security folder, remove the default wso2carbon.jks file.
2. Copy the generated keystore to the /security folder.

3. In the <MB_HOME>/repository/conf/axis2/axis2.xml file, update the keystore section with details appropriate to the generated keystore.

   <parameter name="keystore" locked="false">
               <KeyStore>
                   <Location>repository/resources/security/wso2carbon.jks</Location>
                   <Type>JKS</Type>
                   <Password>wso2carbon</Password>
                   <KeyPassword>wso2carbon</KeyPassword>
               </KeyStore>
           </parameter>

4. In the <MB_HOME>/repository/conf/tomcat/catalina-server.xml file, change the <Connector  protocol="org.apache.coyote.http11.Http11NioProtocol" section as appropriate.

   compressableMimeType="text/html,text/javascript,application/x-javascript,application/javascript,application/xml,text/css,application/xslt+xml,text/xsl,image/gif,image/jpg,image/jpeg"
    keystoreFile="${carbon.home}/repository/resources/security/wso2carbon.jks"
    keystorePass="wso2carbon"
    URIEncoding="UTF-8"/>

5. In the <MB_HOME>/repository/conf/advanced/qpid-config.xml file, update the keystore section below with your customised keystore details.

   <ssl>
               <enabled>true</enabled>
               <sslOnly>false</sslOnly>
               <keystorePath>repository/resources/security/wso2carbon.jks</keystorePath>
               <keystorePassword>wso2carbon</keystorePassword>
               <truststorePath>repository/resources/security/client-truststore.jks</truststorePath>
               <truststorePassword>wso2carbon</truststorePassword>
   </ssl>