Configuring One-Way SSL for the NSK C-Agent on the Veridata Server

If the Oracle GoldenGate Veridata server keystore has not been created, then use the keytool command as follows to generate the server keystore.

Go to <Server_installation_location>/config directory.

Build Server Keystore with the following command:

keytool -genkeypair -keyalg RSA -keystore vdtServerKeystore.p12 -storepass <unlock-password>

Import NSK C-Agent Certificate to Server Truststore

Go to <Server_installation_location>/config directory, and copy the NSK C-agent certificate to this directory.
Run the following command to create a server truststore and import the NSK C-agent certificate into this truststore:
```
keytool -importcert -file <nsk-agent-certificate-file> -alias vdtAgent.crt.<unique-id>  -keystore vdtServerTruststore.p12 -storepass <unlock-password>
```
Note:
When importing multiple NSK C-agent certificates into a server truststore, assign a unique -alias value to each NSK C-agent certificate.
Delete the NSK C-agent certificate in <Server_installation_location>/config directory.

Save Server Truststore passwords to Server Wallet

Run the script named configure_server_ssl.sh under<Server_installation_location>/config directory.

For One-Way SSL, a Server Keystore is not required. If no Server Keystore has been configured, then press Enter when prompted. However, if a Server Keystore is available, enter the password when prompted.

./configure_server_ssl.sh
OGGV-80056: Copyright (c) 2013, 2024, Oracle and/or its affiliates. All rights reserved.
OGGV-80057: Veridata Server SSL Configuration Utility
OGGV-80058: Notes:
OGGV-80059: This utility allows Veridata to access keystore and truststore. When entering the passwords below, unlock password should match the one used in keytool -storepass option.
[OGGV-80060: Enter Server Keystore unlock password:]
[OGGV-80062: Enter Server Truststore unlock password:]