Table of Contents
Advertisement
b. The primary server's certificate.
c. The entire bundle (as one file).
For a certificate bundle, create a new file named aspera_server_cert.chain in the same directory as the
.pem files. Copy and paste the root certificate into this file, followed by the bundle.
6. Enable SSL options in aspera.conf.
For information about enabling specific SSL protocols with <ssl_protocol> and enabling specific encryption
ciphers with <ssl_ciphers>, see
7. Restart asperanoded by running the following command:
Run the following commands to restart asperanoded:
# systemctl restart asperanoded
or for Linux systems that use init.d:
# service asperanoded restart
Installing SSL Certificates
Aspera strongly recommends installing valid, signed SSL certificates on your HST Server. The SSL certificates are
uasperanoded and asperahttpd.
Requirements:
•
A signed root certificate or certificate bundle (root certificate with chained or intermediary certificates) from an
authorized Certificate Authority. For instructions on generating an SSL certificate, see
Nodes
on page 284.
•
The certificate is in .pem format. Other formats are not supported.
Procedure Overview:
The procedure modifies or creates three files:
aspera_server_key.pem
aspera_server_cert.pem
aspera_server_cert.chain
Configuring the IBM Aspera NodeD Service
•
Created automatically during transfer server
installation.
•
Found in the default Aspera installation directory: /
opt/aspera/etc
•
Contains the default private key.
•
In this procedure, you replace the default private
key with the new private key generated with the
certificate signing request (CSR).
•
Created automatically during transfer server
installation.
•
Found in the default Aspera installation directory: /
opt/aspera/etc
•
Contains the default self-signed certificate.
•
In this procedure, you replace the default self-signed
certificate with the content described in step 3.
•
You create this file, as described below.
•
You place the file in the same directory
as aspera_server_key.pem and
aspera_server_cert.pem.
| Set up HST Server for Node API | 286
on page 277.
Setting up SSL for your
Hide quick links:
Advertisement
Table of Contents
Troubleshooting
