Quantcast
Channel: Zenoss Community: Message List
Viewing all articles
Browse latest Browse all 1118

Re: Needing complete Zenoss over https directions

$
0
0

I have this up and working now with Zenoss 4.2.4 and CentOs 6.4. I personally prefer this way and it seems a lot easier to setup.

 

Setup HTTS for zenoss on Centos 6.4

 

  • Aquire a Certificate with a matching private key
  • yum install stunnel
  • Copy the certificate and matching private key to /etc/stunnel
  • nano /etc/stunnel/stunnel.conf                                   #No file existis you will be creating it
    • cert = /etc/stunnel/certificate
    • key = /etc/stunnel/key
    • [https]
    • accept  = 443
    • connect = 8080
    • TIMEOUTclose = 0

 

  • nano /etc/default/stunnel                                              #No file existis you will be creating it
    • ENABLED=1
  • Su -  zenoss
  • cd /opt/zenoss/etc
  • nano ./zope.conf
    • <cgi-environment>
    •     HTTPS ON
    •     HTTPS_PORT 443
    • </cgi-environment>
    • Ip-address 127.0.0.1                                             #uncomment this line makes zope only listen locally (This was done in past versions but doesn't seem necessary in zenoss 4)
  • Zopectl restart

 

Now if you run the command "stunnel" it will start stunnel and https will be working. To start stunnel auto follow these instructions as root:

First you need to extract the init script (located in the folder "tools") out of the source package located at:

https://www.stunnel.org/downloads/stunnel-4.56.tar.gz

Copy the init script to /etc/init.d/ and rename it to stunnel

Change permissions as: chmod 755 stunnel

Create the directory /var/run/stunnel/                           #Not sure if this is needed yet

Lastly we need to modify the init script located in /etc/init.d a little

Change this line:    DAEMON=@prefix@/bin/stunnel

To This line:            DAEMON=usr/bin/stunnel


Viewing all articles
Browse latest Browse all 1118

Trending Articles