Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

SSVM refers to realhostip.com to form some URLs - like URLs for template download, extract and copy. SSVM already supports the ability to turn on or off SSL support, via the parameter secstorage.encrypt.copy.
Configuration parameter secstorage.ssl.cert.domain, as per https://issues.apache.org/jira/browse/CLOUDSTACK-2940 , is used to configure for SSL case. To keep things consistent with console proxy, the configuration parameter expects a value of the form "*.somedomain.com" for customization.

The Java Keystore for SSVM agents is updated as well when a SSL certificate is uploaded via the UI or APIsAPI. The UI option is under Infrastructure tab. For API, please refer to the documentation for uploadCustomCertificate API relevant to your CloudStack version. The format of the certificate is same as that of the Console Proxy VMs, please refer to the documentation section "Replacing realhostip with your domain" in the CloudStack Admin Guide for steps to generate the correct format for certificates.

Implementation change here is minimal, of handing out the correct domain URL for the above mentioned tasks.

...