SSL with TeamSite

yehohanan

Has anyone been able to successfully configure SSL for TeamSite ?? if so, would you mind sharing the instructions ?

Migrateduser

If you're talking about SSL with OpenDeploy 5.5.1 the answer is no. We attempted to install it but ended up having to open a ticket. We have not had an opportunity to go back and try the recommend solution (we recently learned that we don't need to use SSL so we have pursued it further).

The instructions for creating certificates are horrendous. The following instructions provided by IW Tech Support seem to be a little better:

[start]
The 1st thing to confirm is that during each certification creation
(including the CA), choose all the defaults EXCEPT for the "Common Name"
prompt. Here, enter something unique for each certificate created. So,
here is my setup:

OD Base server (sending server) - fazadl2k
OD Receiver server (receiving server) - fazadhpv

On the base server,

1) The instructions aren't too clear for creating the .rnd file. Using
registry files isn't a good example. A better example would be:

"COPY <some-reasonably-large-log-file> C:\<od-home>\bin\.rnd"

2) Issue "CA.bat -newca" hit enter to select all the defaults and enter a
unique Common Name - fazadl2k.

This will create the demoCA directory.

3) Issue "CA.bat -certall" hit enter to select all the defaults and make
sure Common Name is unique from before - I chose "faz". Again, hit Enter
two more times and then select "y" twice to sign the certificates.

This will create two *.pem files, newcert.pem and newkey.pem in the
[od-home]\bin. Create a new folder in C:\[od-home]\cert and copy both of
these files into this new location. These are the keys and certificates for
the sender.

4) Issue "CA.bat -certall" hit enter to select all the defaults and make
sure Common Name is unique from before - I chose "hpv". Again, hit Enter
two more times and then select "y" twice to sign the certificates.

This will create the keys and certs for the receiver. On the receiver,
create a "cert" directory and copy these files into that directory. ALSO,
copy the entire demoCA directory into the receiver [od-home] directory.

Make sure both the receiver and sender have this line in the odbase.xml
(sender), the deployment configuration file on the sender, and the
odbase.xml or odrcvr.xml of the receiver (remove the sslCaCertificate= line
from the receiver xml file):

<localNode host="FAZADL2K"
sslCertificate="C:\iw-home\opendeployNG\cert\newcert.pem"
sslPrivateKey="C:\iw-home\opendeployNG\cert\newreq.pem"

sslCaCertificate="C:\iw-home\openDeployNG\bin\demoCA\certs\cacert.pem" />

Make sure to confirm the correct paths to the keys. Issue an
iwodserverreset on each system and then try the deployment.
[end]

Let me know if this works for you (in case we go back to SSL for some reason).

evg