VincentHermes commented on issue #4199:
URL: https://github.com/apache/cloudstack/issues/4199#issuecomment-654885550


   @rhtyd We tried these certificate combinations:
   
   * Key - Server Cert - Intermediate Cert - RootCA
   * Key - Server Cert - Intermediate Cert
   * Key - Server Cert - RootCA
   * Key - Server Cert
   
   Only the server cert doesn't work of course because generating the keystore 
requires a fitting key. None of these worked however.
   
   The creation of the Self Signed happened like that:
   `openssl genrsa -out selfsigned.key 2048`
   `openssl req -new -key selfsigned.key -out selfsigned.csr`
   `openssl x509 -req -days 3650 -in selfsigned.csr -signkey selfsigned.key 
-out selfsigned.crt`
   `cat selfsigned.key selfsigned.crt > selfsignedcombined.crt`
   `openssl pkcs12 -in selfsignedcombined.crt -export -out 
selfsignedcombined.pkcs12`
   `keytool -importkeystore -srckeystore selfsignedcombined.pkcs12 
-srcstoretype PKCS12 -destkeystore 
/etc/cloudstack/management/selfsignedcombined.pkcs12 -deststoretype pkcs12`
   
   And after editing `server.properties` it launched HTTPS with that self 
signed cert.
   
   


----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Reply via email to