If you have a backend with a signed certificate you need to import it to the client-truststore and restart the server. This feature enables you to upload the signed certificate through the UI while creating or editing your API. Follow the steps below to add a new certificate to any endpoint.
WUM Update
Prerequisites
- Ensure that you have downloaded the latest WUM update. For more details, see Updating WSO2 Products in the WSO2 Administration Guide.
- If you are an existing user, follow the instructions given below.
Run the scripts inside the
<APIM_WUM_UPDATED_PACK>/dbscripts/apimgt
directory, according to your preferred database. For instructions on configuring databases, see . Verify that the tableAM_CERTIFICATE_METADATA
has been created in your database.Open the
<APIM_HOME>/repository/conf/axis2/axis2.xml
file. Add the following code under thePassThroughHTTPSSLSender
parameter.<transportSender name="https" class="org.apache.synapse.transport.passthru.PassThroughHttpSSLSender"> ... <!-- ============================================== --> <!-- Configuration for Dynamic SSL Profile loading. --> <!-- Configured for 5 mins. --> <!-- ============================================== --> <parameter name="dynamicSSLProfilesConfig"> <filePath>repository/resources/security/sslprofiles.xml</filePath> <fileReadInterval>600000</fileReadInterval> </parameter> </transportSender>
If you use a different Trust Store/ Keystore configuration in the
axis2.xml
orcarbon.xml
files ,modify the KeyStore and TrustStore location in<APIM_WUM_UPDATED_PACK>/repository/resources/security/sslprofiles.xml
file accordingly.
This feature currently supports only the the following formats for keystores and certificates.
- Keystore :
.jks
- Certificate :
.crt
If you need to use a certificate in any other format, you can convert it using a standard tool before uploading.