Question

Replace default SSL certificates

  • 5 April 2024
  • 6 replies
  • 81 views

Badge

Hello, 

Is it possible to replace the default SSL certificate of the X-Ray “appliance”, I didn’t find a procedure for that ?

 

Thank you in advance (hoping this is the correct place to get help on this)

PhS


6 replies

Badge

To install the custom certs into the X-Ray VM, please follow the these steps

  1. Login into the X-Ray VM via ssh.
  2. Run the reinstall_k3s.sh script with the following params PemFilePath, SSLPrivatekeyFilePath and DomainName. 

      

     PemFilePath - it is the path of the pem file location(combined file of server public cert, root CA, intermediate CA)

     SSLPrivatekeyFilePath - It is the path of the private key file location

     DomainName  - DomainName or common name of the server

 

    eg:

    ./reinstall_k3s.sh PemFilePath=/home/nutanix/test.pem SSLPrivatekeyFilePath=/home/nutanix/test.key DomainName=www.server.com

 

After successfully running this script, it will restart the X-Ray VM with the custom cert being provided.

Badge

Thank you very much for your attention to this 

this is the output I get from running this command 

so we are missing ‘helm’ ...

Badge

Strange because helm and k3s are available … sorry, I have very little knowledge with all this 

 

     1. Log on to the X-Ray VM as a Root user.

     2. cd /home/nutanix/

     3. Run the reinstall_k3s.sh script with the following params PemFilePath, SSLPrivatekeyFilePath and DomainName. 

      

     PemFilePath - it is the path of the pem file location(combined file of server public cert, root CA, intermediate CA)

     SSLPrivatekeyFilePath - It is the path of the private key file location

     DomainName  - DomainName or common name of the server

 

    eg:

    ./reinstall_k3s.sh PemFilePath=/home/nutanix/test.pem SSLPrivatekeyFilePath=/home/nutanix/test.key DomainName=www.server.com



Note : It is recommended to export the important results, comparisons, and custom tests from X-Ray and import them after the reinstall succeeds. Take a snapshot of the X-Ray VM before you begin reinstall. In case of errors, you can quickly fix the environment by restoring the snapshot to have a working environment. Kindly note that the test scenarios will need to be manually exported before applying the below steps and needs to be manually imported after applying the below steps.

Badge

As root it works better … but it does not end well neither

 

 

Badge

Found the issue.

My instance need to be configured with Proxy .

 

Thank to all for your help 

Reply