4.2. Import additional CA certificates on UCS

The OX Connector app on Nubus for UCS runs in a container with its own CA store. By default, the app imports the Nubus for UCS root CA into this store. This import enables a secure connection to the Nubus LDAP directory. You might need additional CA certificates when provisioning to a remote OX App Suite installation.

Before you start, make sure that you meet the following prerequisites:

• You have installed the OX Connector app.

• You have the CA certificate files in PEM format.

Use these steps on the system that runs the OX Connector app:

1. Create the /var/lib/univention-appcenter/apps/ox-connector/data/conf/ca-certificates/ directory.

2. Copy the CA certificate files in PEM format to this directory. Use only files with the .pem filename extension. Listing 4.11 shows an example.

   Listing 4.11 Examples of additional CA certificates

   $ file /var/lib/univention-appcenter/apps/ox-connector/data/conf/ca-certificates/*.pem
   .../ox-connector/data/conf/ca-certificates/cert1.pem: PEM certificate
   .../ox-connector/data/conf/ca-certificates/cert2.pem: PEM certificate
   

3. Run the command shown in Listing 4.12 to reconfigure the OX Connector app. The command finishes without errors and adds the certificates to the app’s certificate store. During app updates, the app also imports the certificates from the directory.

   Listing 4.12 Manually reconfigure the OX Connector

   $ univention-app configure ox-connector