Updating Saleculator SSL certificates manually in JAVA keystore


Download certificates ssl1 and ssl2 #

Click https://api.saleculator.com once the website is loaded click on the lock icon as shown below

This image has an empty alt attribute; its file name is Screenshot-2021-03-05-174657.png

Click on Certificate (Valid) button

This image has an empty alt attribute; its file name is image-25.png

In the pop up window click on “Details” Tab

This image has an empty alt attribute; its file name is image-26.png

Under “Details” click “Copy to file” button

This image has an empty alt attribute; its file name is image-27.png

Click “next” in the next screen and choose Base-64 option on the subsequent screen

This image has an empty alt attribute; its file name is image-28.png

Click Next and choose an appropriate folder to download the certificate by clicking “Browse” button

This image has an empty alt attribute; its file name is image-29.png

Type the file name as “ssl1” and click “Save” button

This image has an empty alt attribute; its file name is image-30.png

On the subsequent screen click the “Next” button

This image has an empty alt attribute; its file name is image-31.png

Click “Finish”

This image has an empty alt attribute; its file name is image-32.png

Once the certificate is downloaded successfully you will get a pop-up like the one below

This image has an empty alt attribute; its file name is image-33.png

Click OK and we are done with the download of certificate “ssl1”

Repeat the same steps to download and save certificate “ssl2” from https://www.saleculator.com


Moving ssl files to the raspberry opt folder using WinSCP application #

Once you have downloaded both the certificates move them to /opt/ folder using the WinSCP application.
Double click the WinSCP app to get the window shown below and click on the “Session” tab.

This image has an empty alt attribute; its file name is image-34.png
Note the downloaded certificates ssl1 and ssl2 shown on the left side panel

Click “New Session” from the drop down

This image has an empty alt attribute; its file name is image-35.png

Now it will ask for the Host Name, User Name and Password

This image has an empty alt attribute; its file name is image-36.png

Under Host name type the IP address of the Billing Machine/Saleculator M5 device (e.g. 192.168.1.99)
User Name: root
Password: saleculator
Click “Login” and this will show the /opt/ folder and its files on the right side panel.
Now drag and drop the ssl1 and ssl2 files from the left side panel to the opt folder on the right side panel. Now we have successfully downloaded and moved the certificates to the opt folder of the M5 device.


Import the certificates ssl1 and ssl2 from “opt” folder via the root shell #

Login to the root shell using the Putty app from windows system or by pressing Ctrl+Alt+F1 directly on the keyboard of billing machine.
User name: root
Password: saleculator

Copy paste:
keytool -import -alias ssl1 -keystore /usr/lib/jvm/jdk-8-oracle-arm32-vfp-hflt/jre/lib/security/cacerts -file /opt/ssl1.cer
Hit enter key
Password: changeit
Trust this certificate: yes

Copy paste:
keytool -import -alias ssl2 -keystore /usr/lib/jvm/jdk-8-oracle-arm32-vfp-hflt/jre/lib/security/cacerts -file /opt/ssl2.cer
Hit enter key
Password: changeit
Trust this certificate: yes

Type: reboot and hit enter.
Login to Saleculator using the license key and press the “Reset System” button under “Maintenance”


Import the certificates ssl1 and ssl2 from your flash drive via the root shell (Do this if you are not able to use the WinSCP application or unable to connect Raspberry with your computer!) #

  1. Copy and paste the ssl1 and ssl2 certificate files to you flash drive (Paste it directly outside, not inside any folders in your flash)
  2. Now plug the flash to any USB port on the Raspberry pi device and type below command

    mount /dev/sda1 /flash (Press Enter Key)
  3. Type ls /flash (Press Enter) to check if the flash is properly mounted and ssl files are visible. Once you see the ssl1 and ssl2 files, proceed with next steps.
  4. Now copy past the below command and press Enter Key

    keytool -import -alias ssl1 -keystore /usr/lib/jvm/jdk-8-oracle-arm32-vfp-hflt/jre/lib/security/cacerts -file /flash/ssl1.cer

    Password: changeit
    Trust this certificate: yes
  5. Copy-paste below command and press Enter Key

    keytool -import -alias ssl2 -keystore /usr/lib/jvm/jdk-8-oracle-arm32-vfp-hflt/jre/lib/security/cacerts -file /flash/ssl2.cer

    Password: changeit
    Trust this certificate: yes
  6. Type umount /flash (Press Enter)
  7. Type reboot (Press Enter)



If you want to delete an existing ssl certificate from the keystore, use below command:

keytool -delete -alias ssl1 -keystore /usr/lib/jvm/jdk-8-oracle-arm32-vfp-hflt/jre/lib/security/cacerts -storepass changeit

0 Comments

Leave a Reply

Arrow-up