Horizon 用作 OpenStack 的 Web 门户。
controller# gsed -i -e s@SECURE_PROXY_SSL_HEADER@#SECURE_PROXY_SSL_HEADER@ \ -e s@CSRF_COOKIE_SECURE@#CSRF_COOKIE_SECURE@ \ -e s@SESSION_COOKIE_SECURE@#SESSION_COOKIE_SECURE@ \ /etc/openstack_dashboard/local_settings.py
controller# cp /etc/apache2/2.4/samples-conf.d/openstack-dashboard-http.conf \ /etc/apache2/2.4/conf.d/
以下命令生成自签名的证书以供 Horizon 使用,并将 OpenStack 系统信息显示板配置文件复制到 Apache 配置文件目录中。有关创建自签名证书的更多信息,请参见《SSL/TLS Strong Encryption: FAQ》(《SSL/TLS 强加密:常见问题解答》)。
controller# export DASHBOARD=/etc/openstack_dashboard controller# openssl req -new -x509 -nodes \ -out horizon.crt -keyout horizon.key controller# mv horizon.crt horizon.key ${DASHBOARD} controller# chmod 0644 ${DASHBOARD}/* controller# chown webservd:webservd ${DASHBOARD}/* controller# sed \ -e "/SSLCertificateFile/s:/path.*:${DASHBOARD}/horizon.crt:" \ -e "/SSLCACertificateFile/d" \ -e "/SSLCertificateKeyFile/s:/path.*:${DASHBOARD}/horizon.key:" \ < /etc/apache2/2.4/samples-conf.d/openstack-dashboard-tls.conf \ > /etc/apache2/2.4/conf.d/openstack-dashboard-tls.conf
RedirectPermanent /horizon https://controller-fqdn/horizon ServerName controller-fqdn
controller# svcadm enable apache24