Replacing the Certificates that are Used for the HTTPS Connection to the Information Service

When using a secure connection through HTTPS between Silk4NET and the information service, the following self-signed certificate files are used:

The keystore certificate file is used for the information service HTTPS server.
The following certificate files are used for the machine on which the Silk4NET client is running:
- cacerts
- cacerts.p12
- cacerts.pem

You can use OpenSSL and the Java keytool executable to replace these files with your own certificate files.

Ensure that OpenSSL and a JDK are installed on your machine.
Start the Java keytool executable from the bin folder of your JDK installation folder.

Create a private and public key pair in your private keystore file on the information service HTTPS server:

keytool -genkey -alias jetty -keyalg RSA -keypass Borland -storepass Borland -keystore keystore -validity 1095

When prompted to type a first and last name, type * as a wildcard for the host.
Export the information from your private keystore to a temporary certificate file named server.cer:
```
keytool -export -alias jetty -storepass Borland -file server.cer -keystore keystore
```
This temporary certificate file is required to generate the certificate files for the machine on which the Silk4NET client is running.

Create a certificate file named cacerts from the server.cer file.

keytool -import -v -trustcacerts -alias jetty -file server.cer -keystore cacerts -keypass Borland -storepass Borland

Import the information from the cacerts file into the temporary certificate file cacerts.p12.

keytool -importkeystore -srckeystore cacerts -destkeystore cacerts.p12 -srcstoretype JKS -deststoretype PKCS12 -srcstorepass Borland -deststorepass Borland

Create the public keystore file cacerts.pem in the PKCS12 keystore format from the temporary certificate file cacerts.p12
```
openssl pkcs12 -in cacerts.p12 -out cacerts.pem -cacerts -nokeys
```
Deploy the files keystore, cacerts, cacerts.p12, and cacerts.pem to the configuration folder:
- On a Windows machine, deploy the files to %PROGRAMDATA%\Silk\SilkTest\conf, for example C:\ProgramData\Silk\SilkTest\conf.
- On macOS, deploy the files to ~/.silk/silktest/conf/.