diff --git a/src/murano-manual/src/docbkx/content/installation-guide.xml b/src/murano-manual/src/docbkx/content/installation-guide.xml index ce6c3a4..9b2d613 100644 --- a/src/murano-manual/src/docbkx/content/installation-guide.xml +++ b/src/murano-manual/src/docbkx/content/installation-guide.xml @@ -200,8 +200,17 @@ port = 5672 virtual_host = murano login = murano password = murano +ssl = False +ca_certs = + +[ssl] +cert_file = /path/to/certfile +key_file = /path/to/keyfile +ca_file = /path/to/cafile + ]]> + For more information how to configure SSL take a look at SSL configuration chapter Edit one more configuration file: @@ -245,6 +254,7 @@ signing_dir = /tmp/keystone-signing-muranoapi Register murano-api service in Openstack (note: you need to be authorized in Openstack to run this commands) + HTTPS for Murano API - SSL for Murano API service - can be enabled in ssl section in - /etc/murano-api/murano-api.conf. The use of SSL is - automatically implemented by using a URL starting with HTTPS instead of HTTP. - SSL configuration example using the included sample certificates: + SSL for Murano API service can be configured in ssl section in + /etc/murano-api/murano-api.conf. Just point to a valid SSL certificate. + See the example below: - keyfile = - ca_certs = - cert_required = True + cert_file = PATH + key_file=PATH = PATH + ca_file=PATH ]]> - enable: True enables SSL. Defaults to False. + cert_file=PATH: + Path to the certificate file the server should use when binding to an SSL-wrapped socket. - certfile: Path to Keystone public certificate file. + key_file=PATH: Path to the private key file the server should + use when binding to an SSL-wrapped socket. - keyfile: Path to Keystone private certificate file. - If the private key is included in the certfile, the keyfile maybe omitted. - - - - - ca_certs: Path to CA trust chain. - - - - - cert_required: - Requires client certificate. Defaults to False. + ca_file=PATH: + Path to the CA certificate file the server should use to validate + client certificates provided during an SSL handshake. This is + ignored if cert_file and "key_file" are not set. + + The use of SSL is automatically started after point to HTTPS protocol instead of HTTP during registration Murano API service in endpoints + (Change publicurl argument to start with https://). See here + how to register Murano API in Openstack Keystone. + + + SSL for Murano API is implemented like in any other Openstack component. + This realization is based on ssl python module so more information about it can be found + here. +
SSL for RabbitMQ