Connecting the SSL certificate
To make the server with DCImanager 6 available via HTTPS protocol, you will need an SSL certificate. You can specify the certificate data when installing the platform or connect it later. To purchase an SSL certificate, contact any certificate issuing service or issue a free Let's Encrypt certificate. Read more about Let's Encrypt in the official documentation.
This article describes how to connect and change the SSL certificate.
Connecting a certificate when installing the platform
- Copy the certificate files to the server with DCImanager 6. For example, in the /root/ directory.
When installing the platform, specify the path to the files with the public and private key of the SSL certificate in the ssl-crt-file and ssl-key-file parameters:
Пример команды
./dci install --ssl-crt-file="/root/example.crt" --ssl-key-file="/root/example.key"
CODE
The certificate data will be added to the web server settings.
The certificate files will be copied to /opt/ispsystem/dci/ssl/. The files must be stored in this directory for the platform to work properly.
Connecting a certificate after installing the platform
Copy the certificate files to the server with DCImanager 6. For example, in the /root/ directory.
After connecting, the certificate files must remain in this directory with the same names.
- Connect to the DCImanager 6 server via SSH.
Create a patch_add_ssl.yaml file with the following contents:
version: "3.7" services: input: volumes: - /root/dci.crt:/etc/ssl/certs/default.domain.crt - /root/dci.key:/etc/ssl/private/default.domain.key
CODEComments/root/dci.crt — the path and name of the SSL certificate
/root/dci.key — the path and name of the SSL certificate key
You don't need to change /etc/ssl/certs/default.domain.crt and /etc/ssl/private/default.domain.key — these are paths to the certificate inside the docker container
Run the command:
dci add-patch -f patch_add_ssl.yaml -p add_ssl
CODESpecify the server domain name in the DomainName parameter of the /opt/ispsystem/dci/config.json configuration file:
Example of config.json file
{"MysqlRootPassword":"password","LicenseToken":"token","DomainName":"example.com","CurrentVersion":"6.14.0","UpdateDate":1616262495}
CODEStop docker containers:
dci down
CODEStart DCImanager 6:
dci start
CODE
Certificate change
- Replace the old certificate files with the current ones. The new files must have the same names as the old files.
Stop docker containers:
dci down
CODEStart DCImanager 6:
dci start
CODE