How to add a certificate to Weave

Owned by Shaun Forbes
11 Jul, 2024
3 min read

Step-by-step guide

 

  1. Download and install the Portecle application onto the server that runs Weave. For this example we'll download the portecle.zip file and assume it's been unzipped into the c:\temp directory (the current version of Portecle at the time of writing is 1.11, which is included in the paths within the .zip file).

  2. Start the Portecle application in the same way you'd start a Weave updater. You may be able to double click on the portecle.jar file but if that doesn't work you'll need open a command prompt and start it manually, e.g. assuming Weave is installed at c:\weave\ and Portecle has been extracted to c:\temp\portecle-1.11\ you can open cmd.exe and run java.exe with the -jar option and the path to the portecle.jar file

    C:\Users\sforbes> c:\weave\jre\bin\java.exe -jar c:\temp\portecle-1.11\portecle.jar

     

  3. Select the Examine menu and then click Examine SSL/TLS Connection:

     

  4. Enter the SSL Host and Port of the target system. In this example we're looking at google.com but it'll likely be the name of your ArcGIS Server host, the weave.log file should provide the information just before the PKIX exception (note that if the information in the log does not report a port number then it's is probably 443):

     

  5. Wait for it to load, then select the public certificate and click on PEM (you will likely only have a single certificate to choose from, but this screen shot shows two available):

     

  6. Export the certificate and save it to a file.

  7. Go back to the main screen and select the Open an existing keystore from disk option, and select the cacerts file from the Weave Java runtime (the default password is changeit), for example C:\weave\jre\lib\security\cacerts:

     

  8. Select the Import a trusted certificate into the loaded keystore button:

  9. Select the certificate that was saved in Step 6 and confirm that you trust it, giving it an appropriate alias and verifying that it should be added:

  10. Save the Key Store to disk:

  11. Restart Weave and verify that the external service can now be connected to.

 

If your Weave server is running on a server where you cannot run a graphical application then you can copy the cacerts file to another PC, follow these instructions, then copy the file back to the Weave server.