1.4.2.2 Configuring the Graph Server (PGX)

You must specify the path to the server certificate and the server's private key in PEM format in the graph server (PGX) configuration file.

Note:

If you deploy the graph server into your web server using the web applications download package, then this section does not apply. Please refer to the manual of your web server for instructions on how to configure TLS.

1. Edit the file at /etc/oracle/graph/server.conf, and specify the paths to the server certificate and the server's private key in PEM format, as shown:

   {
     "port": 7007,
     "enable_tls": true,
     "server_private_key": "/etc/oracle/graph/server_key.pem",
     "server_cert": "/etc/oracle/graph/server_certificate.pem",
     "enable_client_authentication": false,
     "working_dir": "/opt/oracle/graph/pgx/tmp_data"
   }

2. Restart the graph server.

   Note:

   • You should use a certificate issued by a certificate authority (CA) which is trusted by your organization. If you do not have a CA certificate, you can temporarily create a self-signed certificate and get started.
   • Always use a valid certificate trusted by your organization. We do not recommend the usage of self-signed certificates for production environments.