Skip to content

HTTPSconfiguration.md

Latest commit

 

History

History
102 lines (98 loc) · 3.6 KB

HTTPSconfiguration.md

File metadata and controls

102 lines (98 loc) · 3.6 KB
Raw

Overview

Here is the sample procedure to enable HTTPS connection for EXPRESSCLUSTER X WebManager or Cluster WebUI in test environment.

For Windows

In the case of OpenSSL v1.0

  1. Download OpenSSL, Win64 OpenSSL v1.0.
    http://slproweb.com/products/Win32OpenSSL.html
    Win64 OpenSSL v1.0.2n Light
    http://slproweb.com/download/Win64OpenSSL_Light-1_0_2n.exe
  2. Install OpenSSL
    • Install folder: C:\OpenSSL-Win64(default)
    • OpenSSL DLL installation: The OpenSSL binaries (/bin) directory
  3. Create .crt and .key files
    • Create a folder and move to it.
      >mkdir C:\tmp\ssl
  >cd C:\tmp\ssl
    • Add environment variables.
      >path=%path%;C:\OpenSSL-Win64\bin
    • Create .key, .csr, .crt files.
      >openssl genrsa -out server.key
  >openssl req -new -key server.key -subj "/C=JP/ST=Hiroshima/L=Hiroshima/O=ore/OU=ore/CN=ore" -config c:\OpenSSL-Win64\bin\openssl.cfg > server.csr
  >openssl x509 -req -in server.csr -signkey server.key -out server.crt -days 7300 -extensions server
  4. Copy the following files to all cluster nodes with the same folder path:
    • C:\ssl\tmp\server.key
    • C:\ssl\tmp\server.crt
  5. Configure HTTPS connection on Cluster configuration>
    • Change Cluster Properties
      • WebManager tab
        • Encryption Settings button
          • HTTPS: Check
          • Certification File: C:\tmp\ssl\server.crt
          • Private Key File: C:\tmp\ssl\server.key
          • SSL Library: C:\OpenSSL-Win64\bin\ssleay32.dll
          • Crypto Library: C:\OpenSSL-Win64\bin\libeay32.dll
    • Apply the configuration and restart Browser which connects to WebManager or WebUI.

In the case of OpenSSL v1.1

  1. Download OpenSSL, Win64 OpenSSL v1.1. http://slproweb.com/products/Win32OpenSSL.html
    Win64 OpenSSL v1.1.1i Light
  2. Install OpenSSL
    • Install folder: C:\OpenSSL-Win64(default)
    • OpenSSL DLL installation: The OpenSSL binaries (/bin) directory
  3. Create .crt and .key files
    • Create a folder and move to it.
      >mkdir C:\ssl
  >cd C:\ssl
    • Add environment variables.
      >path=%path%;C:\OpenSSL-Win64\bin
    • Create .key, .csr, .crt files.
      >openssl genrsa -out server.key 2048
  >openssl req -new -key C:\ssl\server.key -utf8 -out server.csr
  >openssl x509 -req -in server.csr -signkey server.key -out server.crt -days 3650 -extensions server
  4. Copy the following files to all cluster nodes with the same folder path:
    • C:\ssl\server.key
    • C:\ssl\server.crt
  5. Configure HTTPS connection on Cluster configuration>
    • Change Cluster Properties
      • WebManager tab
        • Encryption Settings button
          • HTTPS: Check
          • Certification File: C:\ssl\server.crt
          • Private Key File: C:\ssl\server.key
          • SSL Library: C:\OpenSSL-Win64\bin\ssleay32.dll
          • Crypto Library: C:\OpenSSL-Win64\bin\libeay32.dll
    • Apply the configuration and restart Browser which connects to WebManager or WebUI.

For Linux

Assumption

OpenSSL which is included in OS iso media is installed.

  1. Create .crt and .key
    • Execute the following commands:
      #mkdir /tmp/ssl
  #cd /tmp/ssl
  #openssl genrsa 2048 > server.key
  #openssl req -new -key server.key >server.csr
  #openssl x509 -days 3650 -req -signkey server.key < server.csr > server.crt
  2. Configure HTTPS connection on Cluster configuration
    • Change Cluster Properties -WebManager tab - Encryption Settings button - HTTPS: Check - Certification File: /tmp/ssl/server.crt - Private Key File: /tmp/ssl/server.key - SSL Library: /usr/lib64/libssl.so.10 - Crypto Library: /usr/lib64/libcrypto.so.10
    • Apply the configuration and restart Browser which connects to WebManager or WebUI.