...
For importing data from an OPeNDAP server that communicates using SSL, the certificate of the server either has to be either validated by a known certificate authority or present (preferred) or it has to be added and trusted in the local certificate store of your local Delft-FEWS installation.
To add a certificate to the local Delft-FEWS certificate store, first export the certificate file from the server using a browser, then import the certificate file into the certificate store using e.g. the following command on the command line:
| No Format |
|---|
G:\java\jre6\bin\keytool.exe -keystore G:\FEWS\client.keystore -import -alias aliasName -file fileName -trustcacerts |
...
.
- To export the certificate of a server using Firefox:
- Browse to the server URL.
- Left click on the certificate icon.
- Choose More Information -> Show Certificate -> Details -> Export
- Follow the on screen instructions.
- To export the certificate of a server using Internet Explorer:
- Browse to the server URL.
- Left click on the lock icon.
- Choose View Certificates -> Details -> Copy to File
- Follow the on screen instructions.
To import the certificate file into the certificate store use e.g. the following command on the command line:
| No Format |
|---|
G:\java\jre6\bin\keytool.exe -keystore G:\FEWS\client.keystore -import -alias aliasName -file fileName -trustcacerts |
where fileName is the pathname of the certificate file, aliasName is the alias to use for the certificate, G:\java\jre6\bin\keytool.exe is the pathname is the pathname of the Java keytool.exe file (depends on your Java installation) and G:\FEWS\client.keystore is the pathname of the keystore file in the Delft-FEWS region home directory (depends on your Delft-FEWS installation). The If the client.keystore file in the Delft-FEWS region home directory is automatically read each time when Delft-FEWS starts.
- To export the certificate of a server using Firefox:
- Browse to the server URL.
- Left click on the certificate icon.
- Choose More Information -> Show Certificate -> Details -> Export
- Follow the on screen instructions.
...
does not exist yet, then the above command will create it. In that case the keytool will ask the user to enter a new password for the keystore twice. Otherwise the keytool will ask the user to enter the password of the existing keystore once. After entering the password, the keytool will display details of the server certificate, type 'yes' to trust the certificate. If the above procedure was successful, then the keytool will display "Certificate was added to keystore". The keystore file in the Delft-FEWS region home directory is automatically read each time when Delft-FEWS starts, so Delft-FEWS may need to be restarted after the certificate has been added.
Known issues
Export of data
...