• Import Mode: Choose Third-party Certificate.
• Certificate Document: Upload or import a certificate.
  Note:

  • Only CRT and PEM formats are supported.
  • The certificate content starts with ----BEGIN CERTIFICATE---- and ends with ----END CERTIFICATE----.
• Private Key: Upload or import a private key.
  Note:

  • Only KEY and PEM formats are supported.
  • The private key content starts with ----BEGIN (RSAIEC) PRIVATE KEY---- and ends with ----END (RSAIEC) PRIVATE KEY----.
• Certificate Chain: Upload or import a certificate chain.
  Note:

  • Only CRT and PEM formats are supported.
  • The certificate content starts with ----BEGIN CERTIFICATE---- and ends with ----END CERTIFICATE----.
• HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.

• Import Mode: Choose System Self-signed Certificate.
• Duration: Specify a validation duration for the system self-signed certificate. Valid values: 3 months, 1 year, 3 years, 5 years, and 10 years. By default, 10 years is selected.
• HTTP Redirection: Optional. If enabled, requests are redirected by default from port 5000 of the HTTP address to port 5443 of the HTTPS address.
• Custom Certificate Information: Optional. If enabled, you can customize your self-signed certificate information.
  • Common Name: Optional. Set a common name. By default, the common name is localhost.

    The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

  • Organization Name: Optional. Set a name for your organization. By default, the organization name is localhost.

    The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

  • Organization Unit Name: Optional. Set a name for your organization unit.

    The input must be 1 to 64 characters in length and can contain letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

  • Country/Region Name: The country/region name can only be set as CN.
  • State/Province Name: Optional. Set the state or province name.

    The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

  • Locality Name: Optional. Set a city name.

    The input must be 1 to 128 characters in length and can contain Chinese characters, letters, digits, and special characters. Supported special characters include ~`@#$%^&*()-_+={}[]|:;'<>.?/

  • Email Address: Optional. Set an email address.

mkdir certs

keytool -genkey -alias tomcat  -storetype PKCS12 -keyalg RSA -keysize 2048 -keystore ./certs/keystore.p12 -validity 365

[root@localhost ~]# mkdir certs
[root@localhost ~]# keytool -genkey -alias tomcat  -storetype PKCS12 -keyalg RSA -keysize 2048 \
-keystore ./certs/keystore.p12 -validity 365
Enter keystore password:
Re-enter new password:
What is your first and last name?
  [Unknown]:  Jack Chen
What is the name of your organizational unit?
  [Unknown]:  ZStack
What is the name of your organization?
  [Unknown]:  DOC
What is the name of your City or Locality?
  [Unknown]:  SH
What is the name of your State or Province?
  [Unknown]:  SH
What is the two-letter country code for this organizational unit?
  [Unknown]:  CN
Is CN=Jack Chen, OU=Cloud, O=DOC, L=SH, ST=SH, C=CN correct?
  [No]:  Yes
[root@localhost certs]# ls
keystore.p12

[root@localhost ~]# zstack-ctl config_ui --enable-ssl True \
--ssl-keyalias=tomcat --ssl-keystore=/root/certs/keystore.p12 --ssl-keystore-type=PKCS12 \
--ssl-keystore-password=password --server-port=8888
[root@localhost ~]# zstack-ctl show_ui_config
db_url = jdbc:mysql://10.0.233.184:3306
db_username = zstack_ui
db_password = zstack.ui.password
mn_host = 127.0.0.1
mn_port = 8080
webhook_host = 127.0.0.1
webhook_port = 5000
server_port = 8888
log = /usr/local/zstack/apache-tomcat/logs
enable_ssl = true
ssl_keyalias = tomcat
ssl_keystore = /usr/local/zstack/zstack-ui/ui.keystore.p12.cp
ssl_keystore_type = PKCS12
ssl_keystore_password = password
[root@localhost ~]# zstack-ctl stop_ui
successfully stopped the UI server
[root@localhost ~]# zstack-ctl start_ui
successfully started UI server on the local host, PID[32166], https://10.0.233.184:8888

[root@localhost ~]# zstack-ctl config_ui --restore

[root@localhost ~]# zstack-ctl config_ui --webhook-host VIP