Managing the LWC CAROOT File

What is the CAROOT file?

NuWave distributes a copy of the Mozilla Certificate Authority certificate bundle as a file called CAROOT. This bundle is available at https://curl.se/docs/caextract.html

LightWave Client uses a CAROOT file to establish the trust chain on outbound HTTPS connections.

Periodically, this source Mozilla CA bundle is updated as new CA's are added and others are removed.

NuWave updates the CAROOT to the latest available version, if needed, prior to each product release.

However, occasionally the CAROOT bundle must be updated between releases; for example, if a Certificate Authority's private keys become compromised.

Installing a new CAROOT file

1. Backup existing CAROOT file(s).

2. Download the current NuWave CAROOT from https://cdn.nuwavetech.com/pub/lightwave/client/CAROOT/caroot

3. Upload the new CAROOT to the NonStop system hosting LightWave Client. The upload must as text (filecode 101 on the Nonstop).

4. Replace the LightWave Client instance CAROOT with the new version.

Recommendation when running multiple LightWave Client instances

If multiple LightWave Client instances are running in your environment, you may wish to use a single CAROOT file for all the instances. You can do with by using the CLIENT program startup option --ca-root-certs with each instance.

See: CLIENT Command Line Reference for more information about the --ca-root-certs option.