ssl cert update process.
has the process changed to update ssl cert on newer version?
previously i used to do this,
and hit save,
now i see this,
and does the section for public certificate needs to be empty?
you guidance will be really appreciated, as our cert is expiring in 1 month or so on our dev server.
Br,
HS
Best Answers
-
The ability to apply an SSL certificate via the UI was added in v2.12.9
Public certificates are for connecting Data Studio to 3rd-party applications. If this is not what you are doing then can ignore
0 -
Click the button 'Upload server certificate' then click the button 'Upload key file' (or drag the file into the dashed line box). Do the same clicking the 'Upload certificate file' button
0 -
We've extended the documentation to explain what the Server certificate and Public certificate settings are used for:
The Server certificate section in Settings > Communication is used to add a certificate to the Java keystore. The server certificate will be used by the server (Data Studio) to authenticate itself to clients (browsers, or API integrations).
The Public certificate section is used to add certificates to the Java truststore. While a keystore typically holds a certificate owned by the server (Data Studio) that identify it to clients, a truststore holds public certificates that allow other services to be trusted. Public certificates would be added to allow Data Studio, acting as the client, to set up successful SSL connections to other applications such as APIs or external data sources.
1
Answers
-
@josh
I still cannot find the steps that are needed to be performed from links you posted, as I explained the previous steps that we have in our documentation.
I need steps explained via UI.0 -
thanks josh, so it is almost same, just a little change in UI,
we will follow the same practice as we do. thanks for prompt response.0 -
thanks @Henry Simms , everything went perfectly fine and we have applied the new cert on our dev environment.
1 -
@Henry Simms looks like this process changed again, what do i give in alias field? before hitting the save button?
do i need to restart services after this?0 -
pfx file, passphrase , i know,
but what is alias?0 -
Hi Hassan
Those fields (alias and Password) apply to the process of uploading a new public certificate to Data Studio's truststore, for example if you are adding a new public certificate that allow another service (eg an API) to be trusted by Data Studio. Since a truststore will typically include many certificates, the alias servers as a unique identifier, allowing the certificate to be referenced in the store. There are no strict format requirements for the alias, but best practice would be for it to be unique, descriptive (meaningful) and alphanumeric.
Please check that you want to add a public certificate and not a Server certificate here. The Server certificate identifies the Data Studio service to other clients, and includes a private key with and associated public key certificate(s), sometimes wrapped together in a pfx. The process of uploading a Server certificate has not changed - upload the key and cert files:
0 -
oh got it, i need to click here, update server cert! thanks!
yes we do all that
"The Server certificate identifies the Data Studio service to other clients, and includes a private key with and associated public key certificate(s), sometimes wrapped together in a pfx. The process of uploading a Server certificate has not changed - upload the key and cert files:
"
pfx file and passphrase and all that!1 -
@Henry Simms it never asked me key file? before?
or do i give pfx file in key file?0 -
ok, key file is pfx file! got it!!
1