Solution to that issue revealed a second problem: when I try to run the cli.sh commands over a secure port, locally or remotely, I get an error. For example:
./cli.sh update -u openidm-admin:openidm-admin --url https://localhost:8443/openidm/ openidm-patch.zip
./cli.sh update -u openidm-admin:openidm-admin --url https://172.16.206.5:8443/openidm/ openidm-patch.zip
I get the following error:
Based on this article, one solution is to use a genuine SSL certificate – but the cli.sh command (and related internal code such as RemoteCommandScope.java and LocalCommandScope.java) do not include any option to read in a different SSL cert.
Alternative question – would the commands work if a genuine SSL cert is added to the OpenIDM keystore?