Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  1. Log in to the Remote Services server as an administrator

  2. Go to the /etc/pki/tls/ folder

  3. Copy your self-signed Remote Services certificate (and API certificate(s)), or wildcard certificate to the certs folder and your private key to the private folder

  4. Convert your certificates to PCKS12 format. For a wildcard certificate, do this for each server and enter its fully qualified domain name.

    1. For the Remote services server, replace ${DOMAINCERT_NAME} with your certificate name and replace ${REMOTE_SERVICES_FQDN} with the domain name of your remote RS server.

      Code Block
      openssl pkcs12 -export -in ${DOMAINCERT_NAME}.crt -inkey ${DOMAINCERT_NAME}.key -name ${REMOTE_SERVICES_FQDN} -out import_cert_key_rs
    2. For the API server, replace ${DOMAINCERT_NAME} with your certificate name and replace ${ABIQUO_SERVER_FQDN} with the domain name of your Abiquo API server.

      Code Block
      openssl pkcs12 -export -in ${DOMAINCERT_NAME}.crt -inkey ${DOMAINCERT_NAME}.key -name ${API_SERVER_FQDN} -out import_cert_key_server 
  5. Go to the /opt/abiquo/tomcat/conf folder

  6. Create a .jks keystore with the same name as the hostname of your Remote services server. (warning) This keystore configuration is suitable for a test environment only

    Code Block
    keytool -genkey -keyalg RSA -keystore {REMOTE_SERVICES}.jks -keysize 2048
  7. Import the Remote services certificate into the keystore for Tomcat to use

    Code Block
    keytool -importkeystore -deststorepass changeit -destkeystore ${REMOTE_SERVICES}.jks -srckeystore import_cert_key_rs -srcstoretype PKCS12
  8. Import the API server certificate into the keystore for Tomcat to use

    Code Block
    keytool -importkeystore -deststorepass changeit -destkeystore ${REMOTE_SERVICES}.jks -srckeystore import_cert_key_server -srcstoretype PKCS12

...

Code Block
keytool -import -trustcacerts -alias ${REMOTE_SERVICES_FQDN} -file /etc/pki/abiquo/${DOMAINCERT_NAME}.crt -cacerts

If you are using a self-signed certificate, also import your CA certificate.

...