Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: https://wso2.org/jira/browse/DOCUMENTATION-6506

...

Create SSL certificates for both the manager and worker nodes using the instructions that follow. 

Note
  • In the sample configurations given under Step 1 - Configure the Load Balancer, the names of ssl key and the certificate for the manager node is mgt.key and mgt.crt, and for worker node its wrk.key and wrk.crt respectively. Please uset these names for <key_name> and <certificate_name> when you are generating keys and certificates.
  • While creating keys, enter the host name (am.wso2.com or mgt.am.wso2.com) as the Common Name.
  1. Create the Server Key.

    Code Block
    $sudo openssl genrsa -des3 -out server<key_name>.key 1024
  2. Certificate Signing Request.

    Code Block
    $sudo openssl req -new -key server<key_name>.key -out server.csr
  3. Remove the password.

    Code Block
    $sudo cp server.key server<key_name>.key.org 
    $sudo openssl rsa -in server<key_name>.key.org -out server<key_name>.key
  4. Sign your SSL Certificate.

    Code Block
    $sudo openssl x509 -req -days 365 -in server.csr -signkey server<key_name>.key -out server<certificate_name>.crt

...

  1. Copy the key and certificate files generated in above step 4 to /etc/nginx/ssl/ location. 

You have now configured the load balancer to handle requests sent to am.wso2.com and to distribute the load among the worker nodes in the worker sub-domain of the wso2.am.domain cluster.

...