Configure a Java truststore on the Nolio agent in wrapper.conf instead of cacerts

Products

• CA Release Automation - Release Operations Center (Nolio)

Issue/Introduction

To resolve the error "Cannot complete operation: com.ibm.jsse2.util.ValidatorException: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target" when running action step Download File (HTTP), certificates of the server in the URL need to be added to cacerts.

Is there a different way to configure the Nolio agent with the certificates.

Environment

Nolio Release Automation agent 6.7, 6.8, 6.9

Resolution

In most cases adding the certificates to cacerts is easy with keytool.

But instead the certificates can also be added to the keystore file in the agent installation.
To configure it, wrapper.conf in the conf folder needs to be updated. 
The following lines should already be there and need to be uncommented:

# wrapper.java.additional.3=-Djavax.net.ssl.trustStore=conf/keystore.jks 
# wrapper.java.additional.4=-Djavax.net.ssl.trustStorePassword=n0L10~28307

Note that the .3 and .4 may need to updated so they do not overlap with any wrapper.java.additional settings earlier in the same file.
So check for all entries that are not commented and find the highest number that is used and then use the next available number.

The required certificates can be added to the keystore.jks file using keytool similar to what was done for cacerts.