Page Comparison

...

To have Weave ignore the certificates you have to set a system property called weave.ignoretls, this property should be set to a comma separated list of host name that should have their certificates automatically accepted, to accept a group of hosts you can use an * in the name. This property could be set in the ...\weave\jetty_base\start.d\weave.ini file.

Setting the property to ignore a group of internal servers and one external server

...

Step-by-step guide

...

Start the Portecle application in the same way you'd start a Weave updater. You may be able to double click on the portecle.jar file but if that doesn't work you'll need open a command prompt and start it manually, e.g. assuming Weave is installed at c:\weave\ and Portecle has been extracted to c:\temp\portecle-1.11\ you can open cmd.exe and run java.exe with the -jar option and the path to the portecle.jar file

C:\Users\sforbes> c:\weave\jre\bin\java.exe -jar c:\temp\portecle-1.11\portecle.jar

Select the Examine menu and then click Examine SSL/TLS Connection:

...

Wait for it to load, then select the public certificate and click on PEM (you will likely only have a single certificate to choose from, but this screen shot shows two available):

...

Go back to the main screen and select the Open an existing keystore from disk option, and select the cacerts file from the Weave Java runtime (the default password is changeit), for example C:\weave\jre\lib\security\cacerts:

...

Select the Import a trusted certificate into the loaded keystore button:

...

Select the certificate that was saved in Step 6 and confirm that you trust it, giving it an appropriate alias and verifying that it should be added:

...

Save the Key Store to disk:

...

Restart Weave and verify that the external service can now be connected to.

Related articles

Connecting to SSL services

...