You add a HTTPS server certificate to the Java key store by exporting it to a local
file using any HTTPS-capable Web browser (for example Internet Explorer) and then
importing this file into the JRE using the keytool executable bundled with the
JRE. The steps are the following using Internet Explorer (if you use other browser the
procedure is similar):
-
Export the certificate into a local file
-
Point your HTTPS-aware Web browser to the repository URL.
If this is your first visit to the repository it will be displayed a
security alert stating that the security certificate presented by
the server is not trusted.
Security alert - untrusted certificate
-
Go to menu .
Internet Options dialog is
opened.
-
Select Security tab.
-
Select Trusted sites icon.
-
Press Sites button.
This will open Trusted sites
dialog.
-
Add repository URL to Websites list.
-
Close Trusted sites dialog and
Internet Options dialog.
-
Try again to connect to the same repository URL in Internet
Explorer.
The same error page as above will be displayed.
-
Select Continue to this website option.
A clickable area with a red icon and text Certificate
Error is added to Internet Explorer address
bar.
-
Click on Certificate Error area.
A dialog containing View certificates
link is displayed.
-
Click on View certificates link.
Certificate dialog is
displayed.
-
Select Details tab of
Certificate dialog.
-
Press Copy to File button.
Certificate Export Wizard is
started.
-
Follow indications of wizard for DER encoded binary X.509 certificate.
Save certificate to local file server.cer.
-
Import the local file into the JRE running
Oxygen XML Developer
.
-
Open a text-mode console.
-
Go to the lib/security subfolder of your JRE
directory, that is of the directory where it is installed the JRE
running
Oxygen XML Developer
. You find the home folder of the JRE in the java.home property
that is displayed in the About dialog, the System
properties tab.
-
Run the following command:
..\..\bin\keytool.exe -import -trustcacerts -file server.cer -keystore cacerts
The
local-file.cer file contains the server
certificate, created during the previous step. keytool requires a
password before adding the certificate to the JRE keystore. The default
password is changeit. If somebody changed the default password
then he is the only one who can perform the import. As a workaround you
can delete the cacerts file, re-type the command
and enter as password any combination of at least 6 characters. This
will set the password for future operations with the key store.
-
Restart
Oxygen XML Developer
.