diff --git a/src/murano-manual/src/docbkx/content/installation-guide.xml b/src/murano-manual/src/docbkx/content/installation-guide.xml
index ce6c3a4..9b2d613 100644
--- a/src/murano-manual/src/docbkx/content/installation-guide.xml
+++ b/src/murano-manual/src/docbkx/content/installation-guide.xml
@@ -200,8 +200,17 @@ port = 5672
virtual_host = murano
login = murano
password = murano
+ssl = False
+ca_certs =
+
+[ssl]
+cert_file = /path/to/certfile
+key_file = /path/to/keyfile
+ca_file = /path/to/cafile
+
]]>
+ For more information how to configure SSL take a look at SSL configuration chapter Edit one more configuration file:
@@ -245,6 +254,7 @@ signing_dir = /tmp/keystone-signing-muranoapi
Register murano-api service in Openstack
(note: you need to be authorized in Openstack to run this commands)
+ HTTPS for Murano API
- SSL for Murano API service
- can be enabled in ssl section in
- /etc/murano-api/murano-api.conf. The use of SSL is
- automatically implemented by using a URL starting with HTTPS instead of HTTP.
- SSL configuration example using the included sample certificates:
+ SSL for Murano API service can be configured in ssl section in
+ /etc/murano-api/murano-api.conf. Just point to a valid SSL certificate.
+ See the example below:
- keyfile =
- ca_certs =
- cert_required = True
+ cert_file = PATH
+ key_file=PATH = PATH
+ ca_file=PATH
]]>
- enable: True enables SSL. Defaults to False.
+ cert_file=PATH:
+ Path to the certificate file the server should use when binding to an SSL-wrapped socket.
- certfile: Path to Keystone public certificate file.
+ key_file=PATH: Path to the private key file the server should
+ use when binding to an SSL-wrapped socket.
- keyfile: Path to Keystone private certificate file.
- If the private key is included in the certfile, the keyfile maybe omitted.
-
-
-
-
- ca_certs: Path to CA trust chain.
-
-
-
-
- cert_required:
- Requires client certificate. Defaults to False.
+ ca_file=PATH:
+ Path to the CA certificate file the server should use to validate
+ client certificates provided during an SSL handshake. This is
+ ignored if cert_file and "key_file" are not set.
+
+ The use of SSL is automatically started after point to HTTPS protocol instead of HTTP during registration Murano API service in endpoints
+ (Change publicurl argument to start with https://). See here
+ how to register Murano API in Openstack Keystone.
+
+
+ SSL for Murano API is implemented like in any other Openstack component.
+ This realization is based on ssl python module so more information about it can be found
+ here.
+ SSL for RabbitMQ