Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Info

If you are seeing PKIX errors relating to connecting to SQL Server databases add trustServerCertificate=true to the connection URL for the data sources pointing to SQL Server, e.g. 

<url>jdbc:sqlserver://prodsql02:1433;DatabaseName=prod;trustServerCertificate=true</url>

Step-by-step guide

...

Start the Portecle application in the same way you'd start a Weave updater. You may be able to double click on the portecle.jar file but if that doesn't work you'll need open a command prompt and start it manually, e.g. assuming Weave is installed at c:\weave\ and Portecle has been extracted to c:\temp\portecle-1.11\ you can open cmd.exe and run java.exe with the -jar option and the path to the portecle.jar file

Code Block
C:\Users\sforbes> c:\weave\jre\bin\java.exe -jar c:\temp\portecle-1.11\portecle.jar

Select the Examine menu and then click Examine SSL/TLS Connection:

...

Wait for it to load, then select the public certificate and click on PEM (you will likely only have a single certificate to choose from, but this screen shot shows two available):

...

Go back to the main screen and select the Open an existing keystore from disk option, and select the cacerts file from the Weave Java runtime (the default password is changeit), for example C:\weave\jre\lib\security\cacerts:

...

Select the Import a trusted certificate into the loaded keystore button:

...

Select the certificate that was saved in Step 6 and confirm that you trust it, giving it an appropriate alias and verifying that it should be added:

...

Save the Key Store to disk:

...

Restart Weave and verify that the external service can now be connected to.

Info

If your Weave server is running on a server where you cannot run a graphical application then you can copy the cacerts file to another PC, follow these instructions, then copy the file back to the Weave server. 

Connecting to SSL services

...