| Panel | |
|---|---|
|
Overview
TrustStore Settings, which allow you to manage the default TrustStore, are available through the user interface.
The Tomcat user running the process has to have write access to the TrustStore file to import or examine certificates.
If you choose not to use the JRE TrustStore, you must configure the following properties in the Universal Controller Start-up Properties (uc.properties) file:
...
These properties will take effect only after you restart Tomcat.
TrustStore Settings Details
See the field descriptions below, for a description of all fields and buttons that display in the TrustStore Settings Details.
TrustStore Settings Field Descriptions
| Field Name | Description |
|---|---|
| Details | This section contains information on the TrustStore details. |
| TrustStore Name | The name of the default TrustStore. This is the value of the javax.net.ssl.trustStore system property. |
| TrustStore File | The actual file name for the default TrustStore. In most cases, if the TrustStore Name is specified then the TrustStore File will be the same; however, if the TrustStore Name is not specified or is not accessible, then a different default TrustStore may be used (e.g. java-home/lib/security/cacerts). If the TrustStore File is blank, then no accessible TrustStore could be found and an empty immutable TrustStore will be used instead. |
| TrustStore Type | The type for the default TrustStore. This will either be JKS or PKCS#12. |
| TrustStore Provider | The provider for the default TrustStore. |
| TrustStore Password | The password for the default TrustStore. A masked value will be show if the TrustStore password is specified; otherwise, it will be blank. |
| Entries | |
| Alias | |
| Type | Entries can be one of the following types:
|
| Algorithm | |
| Certificate Expiration | |
| Created |
Certificate Details
Certificate Details Field Description
| Field Name | Description |
|---|---|
| Details | This section contains information on the Certificate details. |
| Version | The version number (1, 2, or 3) |
| Issuer | The distinguished name (DN) of the certificate’s issuer. |
| Subject | The distinguished name (DN) of the certificate’s subject (owner). |
| Serial Number | The serial number generated by the certificate’s issuer. |
| Valid From | The date and time that the certificate is valid from. |
| Valid Until | The date and time that the certificate is valid until. |
| Signature Algorithm | The algorithm used to sign the certificate. |
| Public Key Algorithm | The algorithm used for the public key. |
| Fingerprints | The SHA-1 and SHA-256 certificate fingerprints. |