dsietz commented on issue #783: Cluster setup API does not support adding nodes via SSL URL: https://github.com/apache/couchdb/issues/783#issuecomment-328111347 If anyone is interested, I figured out how to get ports 9100 ( through 9200) using SSL. I added the following lines to the following files **local.ini** ``` [ssl] port = 6984 cert_file = /etc/couchdb/cert/couchdb.pem key_file = /etc/couchdb/cert/privkey.pem ciphers = undefined tls_versions = undefined secure_renegotiate = undefined certfile = /etc/couchdb/cert/couchdb.pem keyfile = /etc/couchdb/cert/privkey.pem cacertfile = undefined ``` **vm.args** ``` -kernel inet_dist_listen_min 9100 -kernel inet_dist_listen_max 9200 -pa /opt/couchdb/cert -proto_dist inet_tls -ssl_dist_opt server_certfile /etc/couchdb/cert/couchdb.pem server_keyfile /etc/couchdb/cert/privkey.pem ``` To verify a port is secure I used the following command: ``` openssl` s_client -connect xxx.xxx.xxx.xxx:9100 ``` ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
With regards, Apache Git Services
