Import SSL Certificates

1.7 Import SSL Certificates

To import and use custom-SSL certificates other than the default one created during installation, use this procedure.

Note:

A self-signed SSL certificate (Key type: RSA, key length: 4096) is dynamically created during install time for securing HTTPS connection.

You have an option to substitute the default certificate with your own through the command-line interface. For more information, see ahffi.

To import SSL certificates, run:

./ahffi importcert -cert <cert file> -key <key file>

The application restarts automatically after you import custom SSL certificates.

Example 1-3 Import SSL certificates

./ahffi importcert -cert /scratch/certs/ahf.crt -key /scratch/certs/ahf.key
2023-08-14 09:44:18 UTC: [testnode] [2832363] [UPDATE_PROPERTIES] [INFO] Path to the input properties file provided as : /scratch/ahfs_local/install_test/ahf_service.properties.1692006258
2023-08-14 09:44:22 UTC: [testnode] [2832363] [UPDATE_PROPERTIES] [INFO] nginx: the configuration file /scratch/ahfs_local/install_test/ahf_service/third_party/nginx/conf/ahfs_nginx_with_ssl.conf syntax is ok
2023-08-14 09:44:22 UTC: [testnode] [2832363] [UPDATE_PROPERTIES] [INFO] nginx: configuration file /scratch/ahfs_local/install_test/ahf_service/third_party/nginx/conf/ahfs_nginx_with_ssl.conf test is successful
Restarting the application...
2023-08-14 09:44:23 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Component chosen as all
2023-08-14 09:44:23 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Action chosen as restart
2023-08-14 09:44:23 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Successfully removed job(s) for all from crontab
2023-08-14 09:44:28 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Killed the existing Fleet Insights processes
2023-08-14 09:44:32 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Killed the existing collection processing engine processes
2023-08-14 09:44:33 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Killed the existing ahf_service processes for component(s): all.
2023-08-14 09:44:33 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Starting Fleet Insights
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Started Fleet Insights successfully
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] The path to manage_app.log is /scratch/ahfs_local/install_test/ahf_service/log/manage_app.log
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] The path to nginx access.log is /scratch/ahfs_local/install_test/ahf_service/third_party/nginx/logs/access.log
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Starting the collection processing engine
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Collection processing engine is running
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Started the collection processing engine successfully
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Successfully added job(s) for all from crontab
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Started the ahf_service processes for component(s): all.
Successfully imported the certificates

Related Topics

ahffi

Parent topic: Get Started