openas2/docs/证书替换.md

关闭 OpenAS2

service openas2 stop

替换本地私钥库

1. 使用 CA 机构签发或者自签的 pkcs12 格式的证书（内含私钥和证书），替换 OpenAS2Server/config/ubtob.com.p12
2. 修改 OpenAS2Server/config/config.xml 中 certificates 节点的证书配置

重启 OpenAS2

service openas2 restart

导入之前的伙伴证书

1. 连接服务器控制台
   java -DCmdProcessorSocketCipher=SSL_DH_anon_WITH_RC4_128_MD5 CommandLine 10.10.100.174 9990 userID pWd
2. 导入所有伙伴证书
3. cert import b2b.cypress.com /usr/local/edi/OpenAS2/OpenAS2Server/certificates/b2b_cypress_com/b2b_cypress_com.cer
4. cert import ohio450.ohctr.gxs.com /usr/local/edi/OpenAS2/OpenAS2Server/certificates/ohio450.ohctr.gxs.com/ohio450.ohctr.gxs.com.cer
5. cert import server.com /usr/local/edi/OpenAS2/OpenAS2Server/certificates/self-signed/server.com/server.crt