Skip to content

Undo certificate replacement process ​

If an exception raises during the certification replacement process, you can undo the entire process by replacing current certificate files for its backup copies.

The process affects the following files:

FileUsage
BASE_PATH/ssl/keystoreJava keystore used by Apache Tomcat to
serve HTTPS encoded content
BASE_PATH/ssl/truststoreJava Runtime trusted public certificates keystore

This files are backup before starting the process by appending a timestamp to its name.

To restore them, we will stop the web service and replace the generated files with the latest backup files.

bash
iochembd$  BASE_PATH/apache-tomcat/bin/shutdown.sh -force

iochembd$  cp BASE_PATH/ssl/keystore_161019191826 BASE_PATH/ssl/keystore   
iochembd$  cp BASE_PATH/ssl/truststore_161019191826  BASE_PATH/ssl/truststore

iochembd$  BASE_PATH/apache-tomcat/bin/startup.sh

With these steps, our original certificates will be restored and the faulty update process fixed.