Follow the steps in Section 5.3, “Creating Suitable Certificates” to create JGroups and TLS certificates.
Update your configuration to specify these certificates and the keystore password:
shell> tools/tpm configure SERVICE \
--java-tls-keystore-path=/etc/tungsten/secure/tungsten_tls_keystore.jks \
--java-jgroups-keystore-path=/etc/tungsten/secure/tungsten_jgroups_keystore.jceks \
--java-keystore-password=mykeystorepass
Available as of Version 7.1.0, the tpm cert command
can perform the generation steps for you. If you used tpm
cert to generate files for you, they will be located in the
$CONTINUENT_ROOT/generated directory by default.
shell> tools/tpm configure SERVICE \
--java-tls-keystore-path=/opt/continuent/generated/tungsten_tls_keystore.jks \
--java-jgroups-keystore-path=/opt/continuent/generated/tungsten_jgroups_keystore.jceks \
--java-keystore-password=mykeystorepass