KB Article #183144

How to update Ebics Gateway's truststore in case it use Passport as access manager and Passport's certificate have been changed

Problem

Ebics Gateway use Passport as access manager and Passport's certificate have been changed.

Resolution

Ebics Gateway need to trust public cert of every components on which SSL is set and on which Ebics Gateway need to connect to (Database, keycloak, LDAP, Passport,..).


On Ebics Gateway, trusted certificates are kept on <EBICS Gateway install dir>/data/conf/security/ebicsserver.truststore (password have been set during installation of the product or later if this file have been changed or regenerated).


So in case of Passport's certificate have been changed (the one on Passport default's port 6453 or mentioned as "passport.securedServerPort" into <EBICS Gateway install dir>/data/conf/configuration.properties), the new public cert can be add by a keytool command:
---
keytool -import -trustcacerts -alias ebicsserver -file <passport_cert.crt> -keystore <EBICS Gateway install dir>/data/conf/security/ebicsserver.truststore
---