Encrypting AMS lite traffic on PRIMIS

Files

  • /var/opt/viscount/etc/env

  • /var/opt/viscount/etc/freedom.jks (on the master Primis server: Keystore containing the self-signed certificate)

Steps

On the master Primis sever

  1. Update the Primis configuration:

    vim /var/opt/viscount/etc/env

  2. Insert this line at the beginning of the file

    AMS_SSL=yes

  3. Find the line specifying ENGINE_DAEMON_OPTS and add the following options at the beginning

    -Djavax.net.ssl.keyStore=/var/opt/viscount/etc/freedom.jks -Djavax.net.ssl.keyStorePassword=keystore_password

    After the change, the line should look like the following:
    ENGINE_DAEMON_OPTS="-Djavax.net.ssl.keyStore=/var/opt/viscount/etc/keystore.jks -Djavax.net.ssl.keyStorePassword=keystore_password ${ENGINE_DEBUG} …

  4. Find the line specifying DSR_DAEMON_OPTS and add the following options at the beginning

    -DAMS_SSL=$AMS_SSL
    After the change, the line should look like the following:
    DSR_DAEMON_OPTS="-DAMS_SSL=$AMS_SSL -cp ${DSR_HOME}/lib/*: …

  5. Restart Primis

    systemctl restart engine tomcat viscount-dsr

On the replication Primis sever

  1. Update the Primis configuration:

    vim /var/opt/viscount/etc/env

  2. Insert this line at the beginning of the file

    AMS_SSL=yes

  3. Restart Primis

    systemctl restart engine tomcat

 

Related pages