Support Questions

Find answers, ask questions, and share your expertise

CSD - SSLServer Paramaters

avatar

The SSLServer Role in CSDs generates three parameters in the Cloudera Manager UI one for the private key, one for the certificate and another for the certificate chain. However at least in the case of PEM format SSLServer per https://github.com/cloudera/cm_ext/wiki/Service-Descriptor-Language-Reference#-sslserver only a single substitution and a single config name are available instead of three.

 

1 ACCEPTED SOLUTION

avatar

 

Hi Shant,

The documentation there is incomplete. Here's the information you're looking for:

certificateLocationConfigNameOptional. Config name to emit when ssl_server_certificate_location is used in a config file. If null, ssl_server_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_certificate_location}.
certificateLocationDefaultOptional. Default value for ssl_server_certificate_location.
caCertificateLocationConfigNameOptional. Config name to emit when ssl_server_ca_certificate_location is used in a config file. If null, ssl_server_ca_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_ca_certificate_location}.
caCertificateLocationDefaultOptional. Default value for ssl_server_ca_certificate_location.

 

(sorry couldn't get the formatting nicer, forums doesn't seem to like width in the HTML)

I'll get this added to the wiki in a future update.

View solution in original post

1 REPLY 1

avatar

 

Hi Shant,

The documentation there is incomplete. Here's the information you're looking for:

certificateLocationConfigNameOptional. Config name to emit when ssl_server_certificate_location is used in a config file. If null, ssl_server_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_certificate_location}.
certificateLocationDefaultOptional. Default value for ssl_server_certificate_location.
caCertificateLocationConfigNameOptional. Config name to emit when ssl_server_ca_certificate_location is used in a config file. If null, ssl_server_ca_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_ca_certificate_location}.
caCertificateLocationDefaultOptional. Default value for ssl_server_ca_certificate_location.

 

(sorry couldn't get the formatting nicer, forums doesn't seem to like width in the HTML)

I'll get this added to the wiki in a future update.