Follow these steps to update the SSL key/certificate:
On the configuration host, run securityconfig to create a new configuration in a directory in parallel to the standard configuration directory.
On the configuration host, merge the truststore entries
by using the config merge-trust
command:
java -jar KVHOME/lib/kvstore.jar securityconfig \ config merge-trust -root <standard config dir> \ -source-root <new config dir>
In the security directory on the configuration host
run the keytool
command. The keytool prompts
for the current password and then for a new password to set.
keytool -storepasswd -keystore store.keys
Securityconfig will prompt for the new password. The new password should match the new one provided earlier to the keytool command.
If using a Password File store, skip ahead to the next step. To update the keystore password for wallets, use the following command:
java -jar KVHOME/lib/kvstore.jar securityconfig \ wallet secret -directory store.wallet -set -alias keystore
Securityconfig will prompt for the new password. The new password should match the new one provided earlier to the keytool command.
If using Password File stores instead of wallets, use the following command to update the keystore password:
java -jar KVHOME/lib/kvstore.jar securityconfig \ pwdfile secret -file store.pwd -set -alias keystore
Securityconfig will prompt for the new password. The new password should match the new one provided earlier to the keytool command.
Copy the updated store.keys file and either store.pwd or the contents of store.wallet to the security directory on each host and restart the Storage Node using the following commands:
java -jar KVHOME/lib/kvstore.jar stop -root KVROOT
java -jar KVHOME/lib/kvstore.jar start -root KVROOT&