question Re: Clarification on TLS/SSL - Level-3 in Support Questions

Clarification on TLS/SSL - Level-3

Johnny_Bach — Fri, 16 Sep 2022 13:06:56 GMT

i did not mentioned any passphrase while generating the TLS Private key and the Certificates has been issued by the CA Team

As the document states to set client_keypw_file with the password of Private key.

what steps do i need to take in this case ?

Reference Link
https://www.cloudera.com/documentation/enterprise/5-8-x/topics/cm_sg_config_tls_agent_auth.html#concept_oqh_mxk_rp

Re: Clarification on TLS/SSL - Level-3

GeKas — Wed, 18 Apr 2018 09:42:58 GMT

You can add a password into your private key file.

Suppose that you private key file is test.pem. Its contents should be like:

-----BEGIN PRIVATE KEY-----
.
.
.
-----END PRIVATE KEY-----

-----BEGIN RSA PRIVATE KEY-----
.
.
.
-----END RSA PRIVATE KEY-----

Run the following command

$ openssl rsa -des3 -in test.pem -out test1.pem -passout pass:test

This command will create the test1.pem file which is protected by password. Its contents will be similar to :

-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: DES-EDE3-CBC,3716DAF995B742A4

.
.
.
-----END RSA PRIVATE KEY-----

Re: Clarification on TLS/SSL - Level-3

Johnny_Bach — Wed, 18 Apr 2018 13:05:16 GMT

But woudn't this would have an impact on the certificate already being generated from CA Team ?

As the private key changes .crt file would also change right ? in that case Cloudera TLS/SSL -level 3 configuration may not work

It's just an thought process , please clarify

Re: Clarification on TLS/SSL - Level-3

GeKas — Wed, 18 Apr 2018 13:11:47 GMT

There should be no impact. It is the same private key. You just encrypt it
with a password.

Re: Clarification on TLS/SSL - Level-3

Johnny_Bach — Wed, 18 Apr 2018 14:57:21 GMT

Awesome ..you are right , i have successfully enabled TLS/SSL with Level -3 encryption

Thank you @GeKas for all your inputs