...
| Table of Contents | ||
|---|---|---|
|
Description
System Modules
It needs to be realized that for ACD’s to be fully functional under HTTPS protocol, its components should be switched to HTTPS protocol, namely the modules
- AuditProxy (Elasticsearch Kibana Proxy)
- AuditServer
- ExportServices
- AuditDriver
- AuditReport
- and in case of use of LDAPS (secure LDAP)
SSL Certificates
It’s important! In order to prevent any potential problems we highly recommend the use of “TRUSTED SSL CERTIFICATES”, namely the certificate issued and signed by a TRUSTED STORE. I
f you are going to use a SELF-SIGNED certificate, you will need to fulfill an additional number of steps as well as adding your SELF-SIGNED certificate to the web-browser exceptions and to the list of trusted certificates of your JVM cacert.
...
This guidance implies that you have already got JKS or PKCS Keystore containing a private key and a certificate chain that corresponds to the hostname of the server that ACD and components are located on (basic installation).
Export of private key and certificate chain into PEM format (required for AuditProxy)
- Start KeyStore Explorer and open your PKCS12 or JKS file.
If you are asked to enter your keystore and private key password, please do so. - Choose the required certificate from the certificates list and click the right mouse button.
Choose Export -> Export Private Key from the drop-down menu.
...