Importing certificates into JVM trust store

If the certificate of CA that signed the certificate of application/server (REDCap, LDAP, etc) that OpenSpecimen is attempting to connect is not in the trust store by default, or if a proprietary certificate is being used, then that certificate needs to be installed in the JVM’s trust store.

Given below are the steps to import the certificate in trust store:

The certificates need to be imported into the JVM trust store as well.

1. Copy the CA (root) certificate to the directory $JAVA_HOME/jre/lib/security

2. Change directory to $JAVA_HOME/jre/lib/security

3. Import the certificate in trust store using the following command:

   $ keytool -import -alias <certificate_alias> \
             -file <certificate_file.cer> \
             -keystore cacerts \
             -storepass changeit
   

4. On importing, restart the OpenSpecimen server/process.