Uploaded image for project: 'Ansible Automation Platform RFEs'
  1. Ansible Automation Platform RFEs
  2. AAPRFE-1765

Custom SSL certs with passphrase

XMLWordPrintable

    • False
    • Hide

      None

      Show
      None
    • False

      1. What is the nature and description of the request?
        Cu is installing/renewing the AAP custom certs used forĀ  Controller GUI, PAH GUI and postgresql ssl certs.
        Cu wants to use the ssl certs and keys which also has a passphrase for its private key.
      2. Why does the customer need this? (List the business requirements here)
        For security reasons, it decreases the risk of leaking the private key file.
        Locking the private key file.
      3. How would you like to achieve this? (List the functional requirements here)
        By allowing the SSL certs with passphrase
        By adding an extra variable in the inventory similar to below:
        1. FOR CONTROLLER UI
      # Certificate and key to install in nginx for the web UI and API
      web_server_ssl_cert=/tmp/custom_certs/AAP_example.cert
      web_server_ssl_key=/tmp/custom_certs/AAP_example.key
      web_server_ssl_key_passphrase=''

      2. FOR AUTOMATION_HUB UI

      # Certificate and key to install in Automation Hub node
      automationhub_ssl_cert=/tmp/custom_certs/AH_example.cert
      automationhub_ssl_key=/tmp/custom_certs/AH_example.key
      automationhub_ssl_key_passphrase=''

      3. FOR POSTGRES

      # Server-side SSL settings for PostgreSQL (when we are installing it).
      postgres_use_ssl=False/True
      postgres_ssl_cert=/tmp/custom_certs/PG_example.cert
      postgres_ssl_key=/tmp/custom_certs/PG_example.key
      postgres_ssl_key_passphrase=''
      1. List any affected known dependencies: Doc, UI etc.
        N/a
      2. Github Link if any
        N/a

              jhardy@redhat.com John Hardy
              rhn-support-mramesh Manasa Ramesh
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated: