Page History

...

For hub-and-spoke systems, SHRINE now insists that the only two certificates in shrine's shrine.keystore on spokes are the node's signing cert and the hub's public CA cert. See what certs are there and remove any extras. Many existing nodes have a third key used to support https.

Be sure the original keystore is backed up!

...

$ keytool -delete -noprompt -alias ${cert.alias}  -keystore ${keystore.file}

You may need to set or update the keyAlias in server.xml's to use the node's signing cert. If you would like to use a different certificate for https the easiest fix is to use a separate keystore fie.

Database Changes

These instructions all use mysql syntax. Versions of .ddl files exist for Oracle and MSSQLServer within SHRINE's source code.

...