How to add a certificate to cacerts

Note: This applies to DocuShare 7.5 Only.

Note: If DocuShare has been upgraded in place on a server that has valid certificates installed into the dstruststore before the upgrade then they should be auto merged into the cacerts during the upgrade process.

DocuShare 7.5 comes with over 200 well know public certificates. If LDAP Server requires self-signed or private certificate to connect, it will need to be imported into the cacerts keystore.

To import a certificate into the DocuShare 7.5 cacerts keystore:

1.      Place a copy of the certificate (.cer) into the <dshome>\jdk\conf\security directory.

2.      Open a command prompt window and select Run as Administrator. This is done by right clicking the CMD application and choosing Run as Administrator.

3.      From the command prompt window, type <dshome>\jdk\bin\keytool -import -keystore <dshome>\jdk\lib\security\cacerts -alias ldaps -file <dshome>\jdk\conf\security\<filename.cer>

Note: If you are prompted to enter a password you can leave blank and press enter or try the word changeit and press enter. Either one should work.

Example:

C:\Xerox\Docushare\jdk\bin\keytool -import -keystore C:\Xerox\Docushare\jdk\lib\security\cacerts -alias ldaps -file C:\Xerox\Docushare\jdk\conf\security\file.cer

4.      Verify that the certificate imported correctly type the following command

<dshome>\jdk\bin>keytool -list -v -keystore <dshome>\jdk\lib\security\cacerts

Example:

C:\Xerox\Docushare\jdk\bin>keytool -list -v -keystore C:\Xerox\Docushare\jdk\lib\security\cacerts

You should see the certificate listed if it has been imported correctly.

Note: You can redirect the output to a file that can be reviewed use the following command:

<dshome>\jdk\bin>keytool -list -v -keystore <dshome>\jdk\lib\security\cacerts >cacertsoutput.txt

5.      Restart DocuShare.

Solution Updated: November 10, 2021

Solution ID: 2117