14.4.2 Using a CA-Signed SSL Certificate

The graph server (PGX) and client installation allows you to use your own CA-signed SSL (Secure Sockets Layer) certificate.

The following outlines the basic steps for using your own CA-signed SSL certificate:
  1. Prepare a CA-signed certificate for the graph server (PGX) and generate the Java keystore file.
  2. Edit the /etc/oracle/graph/server.conf file and specify the server_keystore path to point to the keystore (generated in the previous step).
  3. Optionally, set the keystore password in PGX_SERVER_KEYSTORE_PASSWORD by editing the file at /etc/systemd/system/pgx.service.
  4. Reload the systemd configuration by running the following command:
    sudo systemctl daemon-reload
  5. Restart the graph server.
  6. Configure the client to trust the CA-signed keystore if applicable.

Parent topic: Setting Up Transport Layer Security