You are viewing limited content. For full access, please sign in.

Question

Question

SSL Configuration with Clustering

asked on November 6, 2015

We have a request related to SSL configuration over clustering. Please if you can let us know your feedback and thanks in advance.

 

Topic                     : SSL Configuration.

Environment     :

  1. LF Application Server is under Cluster environment (Node 1, Node 2).
  2. All the modules are in different Servers.

 

Current Scenario:

  1. SSL has been configured for Laserfiche Server. And now the communication between Client and Server is secure.

 

Query 1:

  1. The configuration has been done for Node 1. Kindly let me know is it required to perform the same configuration in Node 2 also, or can we use the same certificate from Node 1 in Node 2?

 

Query 2:

  1. Is there any configuration required for other modules (Workflow, Web Access, Audit Trail)?
  2. Is there any configuration required for custom module developed using Laserfiche SDK?

     

0 0

Replies

replied on November 6, 2015

You probably want the same certificate on both nodes, but it can depend on exactly how your failover cluster works.  Presales is working on a more thorough reply to the email you sent.

0 0
replied on December 23, 2019

Regarding the above question , 

i have same case laserfiche server running over two nodes i configured the SSL for the nodes and in order to work using the cluster name, the registered repositories should use the cluster name for registration.

 

Once i use the cluster name for repository registration it shows internal SSL error .

but when i use one of the nodes fully qualifies names it works fine .

 

is there any required configurations for the cluster to work using SSL connections ?

 

Regards, 

Moayed Mohamed.

 

0 0
replied on December 23, 2019

That sounds like your nodes have certificates using their individual names rather than the cluster name.

0 0
replied on December 23, 2019

The main rule for SSL in general is that the certificate has to be issued to the DNS name that the client uses. How you satisfy that requirement is going to depend on how the clustering works, but in your case it sounds like you need an SSL cert issued to the cluster name.

0 0
replied on January 5, 2020

how to issue the certificate using the cluster name , what is the steps ?

0 0
replied on January 6, 2020

The person who makes the certificate will know how to do that. It sounds like this is for internal use, so that will be the IT department.

0 0
replied on April 24, 2020

I resolved this bu registering the IIS using the cluster name instead of the machine name , then created a certificate request , handled it to the it so they can generate the certificate accordingly and it is done .

 

0 0
You are not allowed to follow up in this post.

Sign in to reply to this post.