Setting up SSL

SSL can be enabled for the Plixer Replicator appliance during the initial appliance setup. It can also be enabled or re-configured at a later time.

Note

An Internet connection is required to download the latest OpenSSl package and other required resources.

The following information will be required for the creation of the self-signed certificate:

Name Field	Description
Country name	The two-letter ISO abbreviation for a country example: US = United States
State / province	The state/province where the organization is located (no abbreviations) example: Maine
City / locality	The city where the organization is located (no abbreviations) example: Kennebunk
Organization	The full legal name of the organization example: Plixer
Email address	The email address for the CA (whom to contact) example: someone@your.domain
Common name	URL to attach to the certificate example: 10.1.1.19 or replicator.company.com
Extra attributes	A challenge password and an optional company name can be added to the certificate request

Reconfiguring SSL

If SSH was not enabled during appliance setup, the enable_ssh.sh script (located in /home/replicator/util/) can be used to enable SSH and create a self-signed certificate.

The script can also be used to create a new certificate using different details. However, the existing certificate must be deleted before the script is run.