Setting up SSL certificates of source and target workbenches

The migration script internally uses cdswctl which relies on systemwide configured certificates to establish connection with the source and target workbenches. SSL certificates belonging to both the source and target workbenches must be set up properly.

Copy your Certificate Authority (CA) to the dir /usr/local/share/ca-certificates/ directory. Ensure that the CA file is in .crt format.
Run the sudo cp foo.crt /usr/local/share/ca-certificates/foo.crt command.
Update the CA store by using the sudo update-ca-certificates command.

Navigate to Finder > Applications > Utilities > Keychain Access.
Select System in the left-hand column.
Import the certificate files into the System keychain by opening File > Import Items.
Results:
The certificate is marked with a red X, meaning that it is entrusted.
Provide trust by double-clicking the certificate.

Under Trust, you can also change the setting to Always Trust (when using this certificate) value on the top.

note

For the command-line utility tool to run with custom certificates on MacOS, you must add the certificate in the keychain as well as include the certificate, ca_path, inside the export-config.ini and import-config.ini files, because Python is not able to pick up system-wide certificates in MacOS.