Enable SSL/Disable SSL

The Enable SSL and Disable SSL actions allow you to manage SSL encryption of all services in the ADH cluster. For additional information on SSL settings, see Requirements for SSL certificates.

To run an action, go to Clusters page, click actions default dark actions default light in the Actions column, and select the action from the drop-down list that appears.

Execute the Enable SSL action
Execute the "Enable SSL" action

When you choose an action, ADCM displays a dialog window where you can specify SSL settings listed in the table below.

SSL settings
Parameter Description Default value

Keystore path

A path to the keystore file

/tmp/keystore.jks

Keystore password

A password for the keystore file

 — 

Truststore path

A path to the truststore file

/tmp/truststore.jks

Truststore password

A password for the truststore file

 — 

TLS Version

Version of the TLS protocol. See Set TLS version for an ADH cluster

TLSv1.2

force

Defines whether current SSL parameters should be overwritten with the specified values

False

The Run an action window for the Enable SSL action
The "Run an action" window for the "Enable SSL" action

After you specify the parameters, click Run. In the action confirmation window that appears, you can select the Verbose checkbox to see additional execution details.

The dialog window of the Disable SSL action contains only the Verbose checkbox.

The Run an action window for the Disable SSL action
The "Run an action" window for the "Disable SSL"

During the execution of the Enable SSL and Disable SSL actions, ADCM stops all services one by one, reconfigures them to enable or disable SSL encryption, then starts the services and checks them.

You can find execution process and result of the action on the Jobs page. On this page you can view action execution details, including verbose Ansible STDOUT/STDERR outputs.

IMPORTANT
If the Ranger Solr plugin is enabled, make sure to manually restart Solr after enabling/disabling of SSL.
Found a mistake? Seleсt text and press Ctrl+Enter to report it