Chapter 2. Authentication and Security
This chapter provides information on authorization through Red Hat Gluster Storage Console's security.
2.1. TLS/SSL Certification Copy linkLink copied to clipboard!
Copy linkLink copied to clipboard!
The Red Hat Gluster Storage Console API requires Hypertext Transfer Protocol Secure (HTTPS) for secure interaction with client software, such as the Console's SDK and CLI components. This involves a process of attaining a certificate from your Red Hat Gluster Storage Console server and importing it into your client's certificate store.
Procedure 2.1. Attain a certificate
This process helps a user attain a certificate from the Red Hat Gluster Storage Console and transfer it to the client machine. A user achieves this using one of two methods:
- Method 1 - Use a command line tool to download the certificate from the server. Examples of command line tools include cURL and Wget; both are available for multiple platforms.
- If using cURL:
curl -o rhsc.cer http://[rhgsc-server]/ca.crt
curl -o rhsc.cer http://[rhgsc-server]/ca.crtCopy to Clipboard Copied! Toggle word wrap Toggle overflow - If using Wget:
wget -O rhsc.cer http://[rhgsc-server]/ca.crt
wget -O rhsc.cer http://[rhgsc-server]/ca.crtCopy to Clipboard Copied! Toggle word wrap Toggle overflow
- Method 2 - Use a web browser to navigate to the certificate located at:Depending on the chosen browser, the certificate either downloads or imports into the browser's keystore.
http://[rhgsc-server]/ca.crt
http://[rhgsc-server]/ca.crtCopy to Clipboard Copied! Toggle word wrap Toggle overflow - If the browser downloads the certificate: save the file as
rhsc.cer.If the browser imports the certificate: export it from the browser's certification options and save it asrhsc.cer.
Each of the above methods results in a certificate file named
rhsc.cer on your client machine. An API user imports this file into the client's certificate store.
Procedure 2.2. Import a certificate to your client
- A certificate import for your client relies on how the client itself stores and interprets certificates. This guide contains an example on importing to a Java keystore in Appendix D, Java Keystores. For clients not using Network Security Services (NSS) or Java KeyStore (JKS), please refer to your client documentation for more information on importing a certificate.