Continuent Documentation

Search:
Manual Home
Tungsten Clustering (for MySQL) 6.1 Manual
Page in Other Manuals
Tungsten Replicator 6.1 Manual
Breadcrumbs
» Tungsten Clustering (for MySQL) 6.1 Manual

       » 2. Deployment

       » 2.6. Deployment Security
Chapters
Preface
1. Introduction
2. Deployment
3. Deployment: MySQL Topologies
4. Deployment: Advanced
5. Operations Guide
6. Tungsten Connector
7. Tungsten Manager
8. Command-line Tools
9. The tpm Deployment Command
10. Replication Filters
11. Performance, Tuning and Testing
A. Release Notes
B. Prerequisites
C. Troubleshooting
D. Files, Directories, and Environment
E. Terminology Reference
F. Internals
G. Frequently Asked Questions (FAQ)
H. Ecosystem Support
I. Configuration Property Reference
Navigate Up
2.6. Deployment Security
Parent Sections
2.6.1. Enabling Security
2.6.2. Disabling Security
2.6.3. Creating Suitable Certificates
2.6.4. Installing from a Staging Host with Manually Generated Certificates
2.6.5. Installing via INI File with Manually Generated Certificates
2.6.6. Installing via INI File with CA-Signed Certificates
2.6.7. Replacing the JGroups Certificate from a Staging Directory
2.6.8. Replacing the TLS Certificate from a Staging Directory
2.6.9. Removing JGroups Encryption from a Staging Directory
2.6.10. Removing JGroups Encryption via INI File
2.6.11. Removing TLS Encryption from a Staging Directory
2.6.12. Removing TLS Encryption via INI File
2.6.13. Configuring Connector SSL
2.6.14. Creating the Truststore and Keystore
2.6.4. Installing from a Staging Host with Manually Generated Certificates
Prev 2.6. Deployment Security Next

2.6.4. Installing from a Staging Host with Manually Generated Certificates

Follow the steps in Section 2.6.3, “Creating Suitable Certificates” to create JGroups and TLS certificates.

Update your configuration to specify these certificates and the keystore password: 

shell> tools/tpm configure SERVICE \
    --java-tls-keystore-path=/etc/tungsten/tls.jks \
    --java-jgroups-keystore-path=/etc/tungsten/jgroups.jceks \
    --java-keystore-password=mykeystorepass
Prev Up Next
2.6.3. Creating Suitable Certificates Home 2.6.5. Installing via INI File with Manually Generated Certificates