1.7 SSL証明書のインポート

インストールの間に作成したデフォルトの証明書ではなく、カスタムSSL証明書をインポートして使用するには、この手順を使用します。

ノート:

自己署名SSL証明書(キー・タイプ: RSA、キー長: 4096)は、HTTPS接続を保護するために、インストール中に動的に作成されます。

コマンドライン・インタフェースを使用して、デフォルトの証明書を独自の証明書に置き換えることもできます。詳細は、「ahffi」を参照してください。

SSL証明書をインポートするには、次を実行します:

./ahffi importcert -cert <cert file> -key <key file>

カスタムSSL証明書をインポートすると、アプリケーションが自動的に再起動されます。

例1-3 SSL証明書のインポート

./ahffi importcert -cert /scratch/certs/ahf.crt -key /scratch/certs/ahf.key
2023-08-14 09:44:18 UTC: [testnode] [2832363] [UPDATE_PROPERTIES] [INFO] Path to the input properties file provided as : /scratch/ahfs_local/install_test/ahf_service.properties.1692006258
2023-08-14 09:44:22 UTC: [testnode] [2832363] [UPDATE_PROPERTIES] [INFO] nginx: the configuration file /scratch/ahfs_local/install_test/ahf_service/third_party/nginx/conf/ahfs_nginx_with_ssl.conf syntax is ok
2023-08-14 09:44:22 UTC: [testnode] [2832363] [UPDATE_PROPERTIES] [INFO] nginx: configuration file /scratch/ahfs_local/install_test/ahf_service/third_party/nginx/conf/ahfs_nginx_with_ssl.conf test is successful
Restarting the application...
2023-08-14 09:44:23 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Component chosen as all
2023-08-14 09:44:23 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Action chosen as restart
2023-08-14 09:44:23 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Successfully removed job(s) for all from crontab
2023-08-14 09:44:28 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Killed the existing Fleet Insights processes
2023-08-14 09:44:32 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Killed the existing collection processing engine processes
2023-08-14 09:44:33 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Killed the existing ahf_service processes for component(s): all.
2023-08-14 09:44:33 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Starting Fleet Insights
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Started Fleet Insights successfully
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] The path to manage_app.log is /scratch/ahfs_local/install_test/ahf_service/log/manage_app.log
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] The path to nginx access.log is /scratch/ahfs_local/install_test/ahf_service/third_party/nginx/logs/access.log
2023-08-14 09:44:37 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Starting the collection processing engine
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Collection processing engine is running
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Started the collection processing engine successfully
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Successfully added job(s) for all from crontab
2023-08-14 09:44:38 UTC: [testnode] [2833231] [MANAGE_APP] [INFO] Started the ahf_service processes for component(s): all.
Successfully imported the certificates