|
|
- #!/bin/sh
-
- # Temporarily permit non-SSL connections to port 8250
- # Fixes cloudstack-management error 'SSL error caught during wrap data: Empty server certificate chain, for local address ...'
-
- # Use only while setting up CloudStack. Provide proper values for production environment.
-
- mysql -u cloud -pcloud -e \
- "
- USE cloud;
- UPDATE configuration SET value='false' WHERE name='ca.plugin.root.auth.strictness';
- "
-
- # CloudStack Management server configuration for SSL authentication.
- # Recommended to be configured via web UI although direct SQL updates are technically possible.
-
- # ca.framework.provider.plugin The configured CA provider plugin
- # ca.framework.cert.keysize The key size used for certificate generation
- # ca.framework.cert.signature.algorithm The certificate signature algorithm
- # ca.framework.cert.validity.period Certificate validity in days
- # ca.framework.cert.automatic.renewal Whether to auto-renew expiring certificate on hosts
- # ca.framework.background.task.delay The delay between each CA background task round in seconds
- # ca.framework.cert.expiry.alert.period The number of days to check and alert expiring certificates
- # ca.plugin.root.private.key (hidden/encrypted in database) Auto-generated CA private key
- # ca.plugin.root.public.key (hidden/encrypted in database) CA public key
- # ca.plugin.root.ca.certificate (hidden/encrypted in database) CA certificate
- # ca.plugin.root.issuer.dn The CA issue distinguished name used by the root CA provider
- # ca.plugin.root.auth.strictness Setting to enforce two-way SSL authentication and trust validation
- # ca.plugin.root.allow.expired.cert Setting to allow clients with expired certificates
-
- # Ref: http://docs.cloudstack.apache.org/en/4.11.2.0/adminguide/hosts.html
|
