How to Add a HTTPS Server Certificate to Oxygen XML Author

You add a HTTPS server certificate to the Java key store by exporting it to a local file using any HTTPS-capable Web browser (for example Internet Explorer) and then importing this file into the JRE using the keytool executable bundled with the JRE. The steps are the following using Internet Explorer (if you use other browser the procedure is similar):
  1. Export the certificate into a local file
    1. Point your HTTPS-aware Web browser to the repository URL.

      If this is your first visit to the repository it will be displayed a security alert stating that the security certificate presented by the server is not trusted.

      Security alert - untrusted certificate

    2. Go to menu Tools > Internet Options. Internet Options dialog is opened.
    3. Select Security tab.
    4. Select Trusted sites icon.
    5. Press Sites button. This will open Trusted sites dialog.
    6. Add repository URL to Websites list.
    7. Close Trusted sites dialog and Internet Options dialog.
    8. Try again to connect to the same repository URL in Internet Explorer. The same error page as above will be displayed.
    9. Select Continue to this website option. A clickable area with a red icon and text Certificate Error is added to Internet Explorer address bar.
    10. Click on Certificate Error area. A dialog containing View certificates link is displayed.
    11. Click on View certificates link. Certificate dialog is displayed.
    12. Select Details tab of Certificate dialog.
    13. Press Copy to File button. Certificate Export Wizard is started.
    14. Follow indications of wizard for DER encoded binary X.509 certificate. Save certificate to local file server.cer.
  2. Import the local file into the JRE running Oxygen XML Author .
    1. Open a text-mode console.
    2. Go to the lib/security subfolder of your JRE directory, that is of the directory where it is installed the JRE running Oxygen XML Author . You find the home folder of the JRE in the java.home property that is displayed in the About dialog, the System properties tab.
    3. Run the following command:
      ..\..\bin\keytool.exe -import -trustcacerts -file server.cer -keystore cacerts
      The local-file.cer file contains the server certificate, created during the previous step. keytool requires a password before adding the certificate to the JRE keystore. The default password is changeit. If somebody changed the default password then he is the only one who can perform the import. As a workaround you can delete the cacerts file, re-type the command and enter as password any combination of at least 6 characters. This will set the password for future operations with the key store.
  3. Restart Oxygen XML Author .