Created 03-11-2017 01:43 PM
The SSLServer Role in CSDs generates three parameters in the Cloudera Manager UI one for the private key, one for the certificate and another for the certificate chain. However at least in the case of PEM format SSLServer per https://github.com/cloudera/cm_ext/wiki/Service-Descriptor-Language-Reference#-sslserver only a single substitution and a single config name are available instead of three.
Created 03-13-2017 04:30 PM
Hi Shant,
The documentation there is incomplete. Here's the information you're looking for:
certificateLocationConfigName | Optional. Config name to emit when ssl_server_certificate_location is used in a config file. If null, ssl_server_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_certificate_location}. |
certificateLocationDefault | Optional. Default value for ssl_server_certificate_location. |
caCertificateLocationConfigName | Optional. Config name to emit when ssl_server_ca_certificate_location is used in a config file. If null, ssl_server_ca_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_ca_certificate_location}. |
caCertificateLocationDefault | Optional. Default value for ssl_server_ca_certificate_location. |
(sorry couldn't get the formatting nicer, forums doesn't seem to like width in the HTML)
I'll get this added to the wiki in a future update.
Created 03-13-2017 04:30 PM
Hi Shant,
The documentation there is incomplete. Here's the information you're looking for:
certificateLocationConfigName | Optional. Config name to emit when ssl_server_certificate_location is used in a config file. If null, ssl_server_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_certificate_location}. |
certificateLocationDefault | Optional. Default value for ssl_server_certificate_location. |
caCertificateLocationConfigName | Optional. Config name to emit when ssl_server_ca_certificate_location is used in a config file. If null, ssl_server_ca_certificate_location will not be emitted into config files, and can only be used in substitutions like ${ssl_server_ca_certificate_location}. |
caCertificateLocationDefault | Optional. Default value for ssl_server_ca_certificate_location. |
(sorry couldn't get the formatting nicer, forums doesn't seem to like width in the HTML)
I'll get this added to the wiki in a future update.