Programming Guide › Transforming Data › Use PDI Transformations on a Server with SSL Configured

Use PDI Transformations on a Server with SSL Configured

To use PDI transformations on a CA GovernanceMinder server that is configured with SSL, use the following procedure.

Note: For more information on how to configure a CA GovernanceMinder server for SSL communication, see the Installation Guide.

Follow these steps:

1. Install OpenSSL.
2. Open a command prompt and run the following command:

   openssl s_client -connect RCM_HOST:8443
   

3. Copy all text between the following (including the begin and end lines) to a cert.txt file:

   ----BEGIN CERTIFICATE----
   

   ----END CERTIFICATE----
   

4. Run the following command to verify the certificate:

   "%JAVA_HOME%\bin\keytool" -printcert -file cert.txt
   

5. Create a rcmServer.keystore file by using the key tool, as follows:

   "%JAVA_HOME%\bin\keytool" -import -file cert.txt -keystore rcmSrever.keystore -storepass password
   

   The file is created under the java bin directory.

6. Copy the rcmServer.keystore file to the PDI home directory.
7. Edit the PDI application files, as follows:
   • Windows: Edit the set-pentaho-env.bat file and add the following:

     set PENTAHO_DI_JAVA_OPTIONS =%PENTAHO_DI_JAVA_OPTIONS% 
     

     Djavax.net.ssl.trustStore=rcmSrever.keystore -Djavax.net.ssl.keyStorePassword=password
     

   • Linux: Edit the set-pentaho-env.sh file and add the following:

     PENTAHO_DI_JAVA_OPTIONS ="$ PENTAHO_DI_JAVA_OPTIONS  
     

     Djavax.net.ssl.trustStore=rcmSrever.keystore -Djavax.net.ssl.keyStorePassword=password"
     

8. Open the spoon.bat/sh file and add the Input step for Users to a transformation.
9. Edit the Input Users step, and click Edit the RCM Connection.
10. Verify the following:
    1. The RCM connection information lists https://servername:sslPort as the connection URL.
    2. The Accept any certificate check box is cleared.
    3. Click Test RCM Connection.

    You have used PDI transformations on a CA GovernanceMinder server that is configured with SSL.