Enabling SSL for workflow

Learn how to enable SSL for Workflow.

Security Socket Layer (SSL) is enabled for Workflow when we want to use SSL with Inbox or Reltio UI. Reltio UI requires HTTPS for connections. Therefore, you must have the HTTPS protocol enabled on your local machine for debugging from the Reltio UI.

Note: The secret for your keystore is server.ssl.key-store-password and the secret for your ssl key is server.ssl.key-password. If the key password isn’t set during certificate creation, then server.ssl.key-password and server.ssl.key-store-password will have the same values.

Run the following command to create the keystore. The following commands will help you to generate an SSL certificate:

keytool -genkeypair -alias workflow -keyalg RSA -keysize 2048
 -storetype PKCS12 -keystore C:/Reltio/workflow/workflow.p12 -validity 3650

Add the following SSL configurations to your app.properties file.
```
server.port=8443
server.ssl.key-store-type=PKCS12
server.ssl.key-store=C:/Reltio/workflow/workflow.p12
server.ssl.key-store-password=<secret for you keystore>
server.ssl.key-password=<secret for you ssl key>
```
Tip: Enter a new port number, server.port=8443, when you aren’t able to start the workflow. Your local machine may have a port conflict.
Check if the HTTPS protocol is enabled.
Select the following link:
https://localhost:8443/workflow-adapter/workflow/status.
When we open the link that we can see the following response from the /status endpoint.
```
   {
    "memory": 
    {
        "JVM_heap_size": 4294967296,
        "Memory_used": 2694664496,
        "Max_memory": 4294967296
    },
    "status": "OK"
}
```
Note: The above warning message appears when you try to open a page with a self-signed certificate. Select Advanced and follow the procedure. The page will be reloaded automatically.