Dell EMC Isilon 換憑證筆記

先把憑證輸入到 isilon 的設備中

# vi /ifs/local/server.crt
# vi /ifs/local/server.key

匯入憑證

# isi certificate server import /ifs/local/server.crt /ifs/local/server.key

檢查憑證是否有正確匯入

# cat /usr/local/apache2/conf/ssl.crt/server.crt
# cat cat /usr/local/apache2/conf/ssl.key/server.key

將複製憑證到每個節點

# isi_for_array -s 'cp /ifs/local/server.key /usr/local/apache2/conf/ssl.key/server.key'
# isi_for_array -s 'cp /ifs/local/server.crt /usr/local/apache2/conf/ssl.crt/server.crt'

停止網頁服務

# isi services -a isi_webui disable

列表出目前所有的憑證

# isi certificate server list -v

變更新安裝的憑證為預設

# isi certificate settings modify  --default-https-certificate=xxxxxxxxxxxxxxx

移除舊有的憑證

# isi certificate server delete yyyyyyyyyyyyyyyy

繼續提供網頁服務

# isi services -a isi_webui enable

驗證憑證是否正確安裝

# echo QUIT | openssl s_client -connect localhost:8080