Table of Contents

Customer Certificates

Introduction

Sometimes customers employ a certificate for Fylr which uses a company specific root authority which is unknown to the JDK which makes AWP fail to connect to such a Fylr instance. Follow these steps to import the Fylr certificate into the JDK keystore.

Solution

  1. Copy the jdk\lib\security\cacerts file into a working folder
  2. Copy the certificate pem file into that working folder
  3. Remove everything in front of the —–BEGIN CERTIFICATE—– block in the pem file
  4. Open a administrative shell and navigate to the working folder
  5. Make sure the JDK keytool is available (On Windows you might want to run set PATH=%PATH%;“c:\Program Files\Fylr\services\jdk\bin”)
  6. Import the certificate:
    keytool -import -v -trustcacerts -alias serveralias -file ./certificate.pem -keystore ./cacerts (Password: changeit)
  7. Copy the updated cacerts file back to the original location (you might want to rename the original version first)