Google Search Appliance Connectors Administration Guide - Manual (Page 22)

2. Under Add more Certificate Authorities, click Browse.
3. Navigate to the connector’s directory and select adaptor.crt.
4. Click Save.
Turn on security with the server.secure property
You can turn on security for the connector by using server.secure property, which
enables HTTPS and certificate checking. Add the following line to your adaptor-
config.properties
file:
server.secure=true
When server.secure=true, the connector uses the GSA's authentication configuration
and HTTPS for all communication. Also, when the value of server.secure is true, the
following conditions apply:
●
You need to add the key to the connector keystore with an alias defined in the
connector config file, server.keyAlias.
●
The connector runs on the configured port enforcing SSL.
●
The Connector Dashboard runs on the configured port enforcing SSL.
● Feeds from the connector are forced to the search appliance secure Feedergate
port (19902), even if the search appliance accepts feeds over HTTP.
●
The connector validates the search appliance’s certificate during the SSL handshake.
Run in secure mode with self-signed certificates
If you are using one or more self-signed certificates in your configuration, you must run the
connector with SSL settings, as shown in the following example command:
(Windows):
java ^
-Djava.util.logging.config.file=src/logging.properties ^
-Djavax.net.ssl.keyStore=keys.jks ^
-Djavax.net.ssl.keyStoreType=jks ^
-Djavax.net.ssl.keyStorePassword= ^
-Djavax.net.ssl.trustStore=
.jks ^
-Djavax.net.ssl.trustStoreType=jks ^
-Djavax.net.ssl.trustStorePassword=changeit ^
-classpath adaptor-name-4.0.3-withlib.jar ^
com.google.enterprise.adaptor.name.NameAdaptor