Importing SSL Certificate

Getting Certificate from Remote Host

The certificate needs to be downloaded from the host. There are different ways to obtain such a certificate:

Via browser:
- For web services: use the browser built-in mechanism to download a certificate;
- FTPS: use Firefox browser with the fireFTP addon (does not work in Google Chrome).
Via the command line using openssl:
BASH
```
openssl s_client -connect <host>:<port> -starttls ftp > <cert>.pem
```
The -starttls ftp option is only needed for FTPS certificates.

Importing Certificate into CData Virtuality Server

The certificate obtained from the remote host needs to be imported into the keystore of the JDK used by the CData Virtuality Server.

The default password for the java keystore is changeit, and the keytool to modify the keystore is shipped with Java and can be found in the JDK/bin folder.

Importing Certificate into CData Virtuality Server Using Embedded JDK

CData Virtuality Servers uses an embedded JDK, so the certificate needs to be imported into the keystore of this JDK as follows:

BASH

keytool -keystore /opt/datavirtuality/dvserver/JDK/lib/security/cacerts -import -alias <alias> -file /path/to/cert -storepass changeit