Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

v2: Small additions to the enable-tls guide #5628

Merged
merged 5 commits into from
Oct 2, 2024
Merged

v2: Small additions to the enable-tls guide #5628

Changes from 2 commits
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
6e98ce8
enable-tls add IP in san.cnf
ilario Oct 2, 2024
15fb381
enable-tls add chown of .crt and .key to influxdb user
ilario Oct 2, 2024
dda8f12
Update content/influxdb/v2/admin/security/enable-tls.md
jstirnaman Oct 2, 2024
2e5ed3e
Update content/influxdb/v2/admin/security/enable-tls.md
jstirnaman Oct 2, 2024
7676ce4
Merge branch 'master' into master
jstirnaman Oct 2, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 4 additions & 2 deletions content/influxdb/v2/admin/security/enable-tls.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -116,6 +116,7 @@ cat > san.cnf <<EOF
[alt_names]
DNS.1 = example.com
DNS.2 = www.example.com
IP.1 = 10.1.2.3
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to add an introduction to this code sample.

EOF

# Generate a private key and certificate signing request (CSR)
Expand Down Expand Up @@ -150,11 +151,12 @@ The user running InfluxDB must have read permissions on the TLS certificate file
Ultimately, make sure all users running InfluxDB have read permissions for the TLS certificate.
{{% /note %}}

In your terminal, run `chmod` to set permissions on your installed certificate files--for example:
The following example shows how to set read permissions on the self-signed
In your terminal, run `chown` to set the owner and `chmod` to set permissions on your installed certificate files--for example:
jstirnaman marked this conversation as resolved.
Show resolved Hide resolved
The following example shows how to transfer the ownership to the user and group `influxdb` and to set read permissions on the self-signed
jstirnaman marked this conversation as resolved.
Show resolved Hide resolved
certificate and key files generated in [the preceding step](#1-download-or-generate-certificate-files):

```bash
sudo chown influxdb: /etc/ssl/influxdb-selfsigned.crt /etc/ssl/influxdb-selfsigned.key
sudo chmod 644 /etc/ssl/influxdb-selfsigned.crt
sudo chmod 600 /etc/ssl/influxdb-selfsigned.key
```
Expand Down