How to publish (replicate) Global Trust Store and how to verify Global Trust Store is published on AEM 6.5 ? | Adobe Higher Education
Skip to main content
Level 4
March 25, 2020
Beantwortet

How to publish (replicate) Global Trust Store and how to verify Global Trust Store is published on AEM 6.5 ?

  • March 25, 2020
  • 3 Antworten
  • 4970 Ansichten

Hi All,

Please can you advise best practice how to publish (replicate) Global Trust Store settings and how to verify that Global Trust Store is published on AEM 6.5 ?

Global Trust Store is accessible (on Author) via http://localhost:4502/libs/granite/security/content/truststore.html

Thank you for your time and advice.

Dieses Thema wurde für Antworten geschlossen.
Beste Antwort von Gaurav-Behl

TrustStore location is /etc/truststore. I haven't tried to replicate or move via package but you may try that

3 Antworten

Gaurav-Behl
Level 10
March 26, 2020

TrustStore location is /etc/truststore. I haven't tried to replicate or move via package but you may try that

Adobe Employee
September 16, 2020
Just replicating /etc/truststore does not solve this You must copy the hmac/master keys were physically copied from the filesystem (/crx-quickstart/launchpad/felix/bundle25/data) to the other instance.
Adobe Employee
March 27, 2020

Why would you want to replicate that out of curiosity?

 

Secondly, unless the hmac/master keys were physically copied from the filesystem (/crx-quickstart/launchpad/felix/bundle25/data) to this other instance day-0 then I wouldn't expect any cryptographic hash-functions to be able to sign. 

Adobe Employee
September 16, 2020

Just replicating /etc/truststore does not solve this. You must copy the hmac/master keys files physically  from the filesystem (/crx-quickstart/launchpad/felix/bundle25/data) too to the other instance. So the steps are:

1. Replicate /etc/truststore

2. Copy the hmac/master keys files physically from the filesystem ( e.g. /crx-quickstart/launchpad/felix/bundle25/data) to all other publish instances