Enabling SSL for Services Using Bash Script

This documentation provides a bash script to enable SSL for the services mentioned below.

Click the following link to access the bash script to setup SSL on your ODP environments via bash script: https://github.com/acceldata-io/ce-utils/blob/main/ODP/README.md.

Note that the following bash scripts are CentOS specific.

Prerequisites

  1. Use the provided script to enable SSL in an ODP environment where you have already generated and distributed the Keystore and Truststore JKS files to all nodes.

    1. HDFS
    2. Infra-Solr
    3. Hive
    4. Ranger
    5. Spark2
    6. Kafka
    7. Hbase
    8. Spark3
    9. Oozie
  2. Ensure that you execute this script on the Ambari Server node. Make sure to update the following details within the script files:

    1. USER: Your Ambari Admin username.
    2. PASSWORD: Your Ambari Admin user password.
    3. PORT: The Ambari Server port.
    4. PROTOCOL: Choose either 'http' or 'https' based on whether Ambari has SSL enabled or not.
    5. keystore: Confirm that the Keystore file is accessible on all nodes.
    6. keystorepassword: Provide the Keystore password.
    7. truststore: Confirm that the Truststore file is available on all nodes.
    8. truststorepassword: Provide the Truststore password.
  3. For Infra-Solr, a PKCS12 format Keystore and Truststore are required:

    1. keystore_p12: Ensure that the PKCS12 format Keystore file is present on the Infra-Solr node.
    2. truststore_p12: Make sure the PKCS12 format Truststore file is available on the Infra-Solr node.
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
  Last updated