TIBCO/BW6-CE/3 → Import SSL certificate of a target website for Tibco BW6-CE

This is a post on Tibco Business Works 6 CE highlighting how to generate Key Store for Tibco BW6 CE using Java Keytool, export the Public Certificate from JKS file and import SSL certificate of a target website

Tibco BW6 CE

• Pre-Requisite:

Java JDK need to be installed. Check your Java version installed in your machine in command prompt.

You can check your Java path if it is already set up, using:

C:\Windows\System32>echo %PATH%
> C:\<PATH>\Java\jdk1.8.0_211\bin;

If not, you can set it up. Once it is there, please run the next Java Keytool in command prompt that generates a Java keystore and key pair.

C:\Windows\System32>keytool -genkey -alias tibcoKeyStore -keyalg RSA -keystore "C:\DATA\Keystore\TibcoKeyStore\<Unique_Name>.jks"

Provide your unique details as per the questions.

This will set up a Java Keystore in your choose location. Note that, keystore alias is “tibcoKeyStore” and the path for keystore.

The above command generates a public/private key pair for you with the details you provided.
The command creates a self-signed certificate that includes the public key and the distinguished-name information.
The distinguished name you supply will be used as the “subject” field in the certificate.

Keystore is created. Now, you can check the newly created keystore entry using an alias.

C:\Windows\System32>keytool -list -v -keystore "C:\DATA\Keystore\TibcoKeyStore\<Unique_Name>.jks" -alias tibcoKeyStore

Now export public key out of keystore.

C:\Windows\System32>keytool -export -alias tibcoKeyStore -file "C:\DATA\Keystore\TibcoKeyStore\<Unique_Name>_pub_cert.cer" -keystore "C:\DATA\Keystore\TibcoKeyStore\<Unique_Name>.jks"

Now to the target webservice’s link and export the certificate. Remember to select the certificate chain option to take export of all intermediate CA certs.

Target URL: https://apps.learnwebservices.com/services/hello

Import the certificate chain export file to KeyStore:

C:\Windows\System32>keytool -importcert -alias learnwebservices -keystore "C:\DATA\Keystore\TibcoKeyStore\<Unique_Name>.jks" -file "C:\DATA\Keystore\TibcoKeyStore\certs\learnwebservices.pem"

Accept it and Certificate is added to KeyStore.

Now we can invoke the target URL from our Tibco BW6 projects using the Https option. This we will see in the next blog post.