Preparing to Install OpenSearch and OpenSearch Dashboards with SSL on Linux

You can install OpenSearch and OpenSearch Dashboards to work with SSL. Before running the script to install OpenSearch and OpenSearch Dashboards, you must set up the truststore and import certificates. The OpenSearch portion of the installation script includes prompts for the keystore, keystore password, truststore, and truststore password. The OpenSearch Dashboards portion of the installation script includes prompts for the private key and PEM files.

The OSK DPK includes the keytool utility, which you can use to set up the truststore and keystore.

  1. Open a terminal window, and change directory to OSK_INSTALL. 

    cd OSK_INSTALL

  2. Extract the entire contents of OSK_FILENAME.zip in the same directory, OSK_INSTALL. 

    unzip OSK_FILENAME.zip

    Note:

    It is a good idea to extract into the same directory where you downloaded the zip files, and to extract into an empty directory for each new installation.

    The extraction creates the following directories in OSK_INSTALL:

    • setup directory — includes the setup script and a sample configuration file.

    • archives directory — includes archives for deployment

    • readme.txt file

    • opensearch-manifest — lists the version information for OpenSearch and JDK included in the DPK

  3. Change directory to OSK_INSTALL/archives, and extract pt-jdk21.0.yy.tgz into a temporary directory, or a directory with a different name, such as pt-jdk-temp.

    It may be necessary to extract the file twice.

  4. Change directory to pt-jdk-temp/bin.

    cd /home/pt-jdk-temp/bin

  5. Follow the instructions in the product documentation to set up a truststore and import the certificate.

    See PeopleTools: Search Technology, "Configuring SSL Between PeopleSoft and Search Engine."

    The instructions set up the keystore and private file under the OpenSearch home directory, OS_HOME. Here you should use a temporary directory to save the file. Make a note of the full path where you create the file, because you will use it when running the installation script.

    keytool -importcert -keystore temp/mytruststore.jks -file /home/certs/cacert.cer -alias my_ca