Enabling SSL for workflow

Learn how to enable SSL for Workflow.

Security Socket Layer (SSL) is enabled for Workflow when we want to use SSL with Inbox or Reltio UI. Reltio UI requires HTTPS for connections. Therefore, you must have the HTTPS protocol enabled on your local machine for debugging from the Reltio UI.

Note: The secret for your keystore is server.ssl.key-store-password and the secret for your ssl key is server.ssl.key-password. If the key password isn’t set during certificate creation, then server.ssl.key-password and server.ssl.key-store-password will have the same values.

Run the following command to create the keystore. The following commands will help you to generate an SSL certificate:

keytool -genkeypair -alias workflow -keyalg RSA -keysize 2048
 -storetype PKCS12 -keystore C:/Reltio/workflow/workflow.p12 -validity 3650

Run the following command to enable additional parameters. For example, the port in which the SSL communication occurs:


"%JAVA_HOME%\bin\java"
        -agentlib:jdwp=transport=dt_socket,server=y,suspend=n,address=5005
        -Dfile.encoding=UTF-8
        -Dspring.config.additional-location=classpath:/application.properties
        -DFS_DIR=C:/Reltio/workflow/ -DWORKFLOW_CONFIG_NAME=app.properties
        -Dserver.port=8443
        -Dserver.ssl.key-store-type=PKCS12
        -Dserver.ssl.key-store=C:/Reltio/workflow/workflow.p12
        -Dserver.ssl.key-store-password=<secret for you keystore>
        -Dserver.ssl.key-password=<secret for you ssl key>
        -jar C:/Reltio/workflow/web-2021.2.0.0.jar

Tip:

Enter a new port number, -Dserver.port=8443, when you aren't able to start the workflow. Your local machine may have a port conflict.
Ensure that the -Dserver.ssl.key-store-password and -Dserver.ssl.key-password fields have correct values.

Check if the HTTPS protocol is enabled.
Select the following link:
https://localhost:8443/workflow-adapter/workflow/status.
When we open the link that we can see the following response from the /status endpoint.
```
   {
    "memory": 
    {
        "JVM_heap_size": 4294967296,
        "Memory_used": 2694664496,
        "Max_memory": 4294967296
    },
    "status": "OK"
}
```
Note: The above warning message appears when you try to open a page with a self-signed certificate. Select Advanced and follow the procedure. The page will be reloaded automatically.

Unify and manage your data

Enabling SSL for workflow

Footer