Add CA Certificate to Ops Manager Java Trust Store

Add the CA certificate of the webhook into the Ops Manager HTTP server.

After adding the absolute path to your webhook trust store to the following command, run it to add your CA certificate to the Ops Manager Java trust store.

sudo /opt/mongodb/mms/jdk/bin/keytool -noprompt -storepass changeit -import -trustcacerts -alias Webhook_CA -file <AbsolutePathofWebhookTrustStore> -keystore /opt/mongodb/mms/jdk/lib/security/cacerts

Confirm that the webhook CA certificate has been added.

Run the following command to confirm that the CA certificate has been added successfully.

sudo /opt/mongodb/mms/jdk/bin/keytool -noprompt -storepass changeit -list -v -keystore /opt/mongodb/mms/jdk/lib/security/cacerts | grep -i Webhook_CA

Restart Ops Manager.

Restart the Ops Manager server in order for the certificates to reload and the change to take effect.

sudo systemctl restart mongodb-mms

Test an HTTPS request to Ops Manager to confirm connectivity.

1. Convert your Java keystore file into PEM format.

   Java keystores are stored in either JKS (Java KeyStore) or PKCS12 format. These formats are incompatible with the curl --cacert option.

   Use a tool of your choosing, such as openssl, to convert your Java keystore file.

2. Replace the placeholder text in the following command with the path to your PEM certificate and your webhook URL:

   sudo curl -vvvv --cacert </path/to/cacerts.pem> <WebhookURL>

3. Run the command to test your webhook's HTTPS connectivity with Ops Manager.