Visulox Certificates

Visulox uses certificates for https services with the following modules:

• fx4

• transit

• webservice

SSL Certifcate handling for transit / webservice

During installation selfsigned ceritfcates are created for transit and webservice. The Visulox Portal Certificates are no longer used.

These certificates

• are valid for 10 years

• are checked by integrity check

• have to be exchanged with already existing certificates
  -- copy existing certificates to: /opt/visulox/etc/ssl/
  -- use visulox config -name fileexchange.certfile=/keyfile/caFile to use the certificate
  -- use visulox config -name fx4.certfile=/keyfile/caFile to use the certificate
  -- use visulox config -name webservice.certfile=/keyfile/caFile to use the certificate

On Visulox Nodes or if it is necessary to use other certificates on Visulox Access Nodes, the keyfiles can be adjusted:

visulox config list -name keyfile
    -----------------------------------------------------
    | changed | key                  | value            |
    -----------------------------------------------------
    |         | fileexchange.keyfile | visulox.self.key |
    |         | fx4.keyfile          | visulox.self.key |
    |         | webservice.keyfile   | visulox.self.key |
    -----------------------------------------------------

The ports can be adjusted here:

visulox config list -name webservice.port,fx4.port,fileexchange.port

    -----------------------------------------------------
    | changed | key                             | value |
    -----------------------------------------------------
    |         | fileexchange.port               |       |
    |         | fx4.port                        |       |
    |         | webservice.port                 | 8114  |
    -----------------------------------------------------

The keyfiles and the ports are global settings. To change these settings only on a single node, /opt/visulox/etc/service.conf has to be used.