/
Enable HTTPS

Enable HTTPS

Obtain/Generate certificates

Regardless of the deployment approach, you need to obtain or generate a certificate and import it into a Java Keystore.

Follow Configuring a Certificate Store - Aspire 5 - Confluence, for instructions on how to import an existing certificate into a Java Key Store or even generate a self-signed certificate.

Container-based deployments

For container-based deployments, configuring HTTPS is as easy as attaching a volume with the certificates and setting up the right environment variables pointing to them.

Official image:

  • accenturesca.jfrog.io/docker/aspire:[VERSION]

Steps

  1. Create a volume containing the following files:

    • certificate.jks

    • certificateAuthority.crt (Optional, if the certificates are not trusted by the JVM)

docker volume create aspire_ssl_certs docker run -v aspire_ssl_certs:/ssl -u root --name temp_container busybox true docker cp /path/to/certificate.jks helpler:/ssl # (optional) # docker cp /path/to/certificateAuthority.crt helpler:/ssl docker rm helper

  1. Mount the volume at any location in your container, for instance, at /opt/aspire/ssl_certs.

docker run -d -v aspire_ssl_certs:/opt/aspire/ssl_certs \ -p 50505:50505 --env ASPIRE_SSL_KEYSTORE=/opt/aspire/ssl_certs/certificate.jks \ --env ASPIRE_SSL_KEYSTORE_PASS=[your-JKS-passphrase] \ --env ASPIRE_SSL_CA=/opt/aspire/ssl_certs/certificateAuthority.crt \ --env aspire_security_https_only=true \ --env com_accenture_aspire_server_hostname=aspire_manager --env ASPIRE_MANAGER_NODE=true --name aspire_manager accenturesca.jfrog.io/docker/aspire:5.1.1

  1. Starting a worker node just requires changing the ASPIRE_MANAGER_NODE to ASPIRE_WORKER_NODE.

    See Properties for all the different environment variables that can be set on Aspire

  2. Access Aspire at https://localhost:50505/.

On-premise deployments

Follow the steps at: Using Aspire via HTTPS

Make sure to add the following environment variable before starting the Aspire nodes:

aspire_security_https_only=true

com_accenture_aspire_server_hostname=node_hostname

The hostname variable is important as Aspire will let other nodes know that's the hostname they should use to access it, and it must match the certificate for other nodes to be able to access it.