...

• The node's signing cert so that its QEP can sign queries.
• The hub's public CA cert so that its adapter can verify other nodes' signatures.
• The hub's public https cert so that the node will trust the hub as a server.
• A cert for this node to use to serve https, referenced in the server.xml file. (Use a cert signed by a public cert authority to avoid a warning in users' browsers.)  

...

...
<Connector port="6443" protocol="org.apache.coyote.http11.Http11NioProtocol"
               maxThreads="150" SSLEnabled="true" scheme="https" secure="true"
               clientAuth="false" sslProtocol="TLS"
               keystoreFile="/opt/shrine/shrine-shrine.keystore"
               keystorePass="changeit" keyAlias="your.https.keyserver.cert.alias" />

...

Database Changes

...