Revision 8265
Added by ben leinfelder over 10 years ago
| replication.rst | ||
|---|---|---|
| 167 | 167 |
sudo cp <hostname>-apache.key /etc/ssl/private |
| 168 | 168 |
|
| 169 | 169 |
4. Apache needs to be configured to request a client certificate when the |
| 170 |
replication API is utilized. The helper file named "knb-ssl" has default
|
|
| 170 |
replication API is utilized. The helper file named "metacat-site-ssl" has default
|
|
| 171 | 171 |
rules that configure Apache for SSL and client certificate authentication. |
| 172 |
Set up these SSL settings by copying the knb-ssl file into the ``sites-available``
|
|
| 172 |
Set up these SSL settings by copying the metacat-site-ssl file into the ``sites-available``
|
|
| 173 | 173 |
directory, editing pertinent values to match your system and running |
| 174 |
``a2ensite`` to enable the site. (Note: some settings in knb-ssl need to be
|
|
| 174 |
``a2ensite`` to enable the site. (Note: some settings in metacat-site-ssl need to be
|
|
| 175 | 175 |
changed to match the specifics of your system and Metacat deployment.) |
| 176 | 176 |
|
| 177 | 177 |
:: |
| 178 | 178 |
|
| 179 |
sudo cp <metacat_helper_dir>/knb-ssl <apache_install_dir>/sites-available
|
|
| 180 |
sudo a2ensite knb-ssl
|
|
| 179 |
sudo cp <metacat_helper_dir>/metacat-site-ssl <apache_install_dir>/sites-available
|
|
| 180 |
sudo a2ensite metacat-site-ssl
|
|
| 181 | 181 |
|
| 182 | 182 |
5. Enable the ssl module: |
| 183 | 183 |
|
Also available in: Unified diff
Refer to metacat.war deployments since those are now the default. https://projects.ecoinformatics.org/ecoinfo/issues/6082