Encrypting AMS lite traffic on PRIMIS
Files
/var/opt/viscount/etc/env
/var/opt/viscount/etc/freedom.jks (on the master Primis server: Keystore containing the self-signed certificate)
Steps
On the master Primis sever
Update the Primis configuration:
vim /var/opt/viscount/etc/env
Insert this line at the beginning of the file
AMS_SSL=yes
Find the line specifying ENGINE_DAEMON_OPTS and add the following options at the beginning
-Djavax.net.ssl.keyStore=/var/opt/viscount/etc/freedom.jks -Djavax.net.ssl.keyStorePassword=keystore_password
After the change, the line should look like the following:ENGINE_DAEMON_OPTS="-Djavax.net.ssl.keyStore=/var/opt/viscount/etc/keystore.jks -Djavax.net.ssl.keyStorePassword=keystore_password ${ENGINE_DEBUG}
…Find the line specifying DSR_DAEMON_OPTS and add the following options at the beginning
-DAMS_SSL=$AMS_SS
L
After the change, the line should look like the following:DSR_DAEMON_OPTS="-DAMS_SSL=$AMS_SSL -cp ${DSR_HOME}/lib/*:
…Restart Primis
systemctl restart engine tomcat viscount-dsr
On the replication Primis sever
Update the Primis configuration:
vim /var/opt/viscount/etc/env
Insert this line at the beginning of the file
AMS_SSL=yes
Restart Primis
systemctl restart engine tomcat
Â