From e647c97d8b6f631c56903a13d1467e130e47dfd2 Mon Sep 17 00:00:00 2001 From: mrpa Date: Wed, 7 Apr 2021 13:00:03 +0200 Subject: Added in Tomcat Certificate generation info and the related limitation in the rel notes. Change-Id: I92ff4209aefe6c5251e4462910152544c56ac82e Signed-off-by: mrpa --- .../doc/advanced_configurations.xml | 62 +++++++++++++++++++++- .../doc/installation_guide.xml | 40 +++++++++----- .../doc/upgrade_ena.xml | 11 ++-- .../doc/known_bugs_and_limitations.xml | 47 ++-------------- 4 files changed, 99 insertions(+), 61 deletions(-) diff --git a/doc/book-enea-edge-getting-started/doc/advanced_configurations.xml b/doc/book-enea-edge-getting-started/doc/advanced_configurations.xml index 90de441..c596735 100644 --- a/doc/book-enea-edge-getting-started/doc/advanced_configurations.xml +++ b/doc/book-enea-edge-getting-started/doc/advanced_configurations.xml @@ -411,6 +411,66 @@ node0.1048576kB = 3 +
+ Tomcat Certificate Generation + + The self-signed Tomcat Certificate the Enea Edge + Management application uses is generated at installation time. It can + be regenerated anytime after installation by using the + createCertificate.sh script. + + On the CentOS 7 server open a terminal, log into a bash shell with + the root account and perform the following: + + + + Extract Enea_Edge_Management_<version>-build<build_number>.tar.gz + + The directory in which the archive has been unpacked will be + denoted as: <uCPEM-installerdir>. + + + + Enter <uCPEM-installerdir>/dist. + + + + Run the following command: + + ./createCertificate.sh ucpemanager <IP_or_domain> \ + /opt/ems [<service_username>] + + Where the following need to be included: + + + + The IP or domain name of the server the Enea Edge + Management application is running on. + + + + The service username, which is the one set when installing the + Enea Edge Management application. For more details + see Fresh Installation of the Enea + Edge Management application in the Manual. + Providing the service username is optional. If it is not provided, the default + value will be used. + + + + + + Restart the Enea Edge Management service: + + service ucpemanager restart + + +
+
Installing the Enea Edge Management application in High Availability Mode @@ -1103,4 +1163,4 @@ Configuration complete.
- \ No newline at end of file + diff --git a/doc/book-enea-edge-getting-started/doc/installation_guide.xml b/doc/book-enea-edge-getting-started/doc/installation_guide.xml index 1ca3b02..477b5c4 100644 --- a/doc/book-enea-edge-getting-started/doc/installation_guide.xml +++ b/doc/book-enea-edge-getting-started/doc/installation_guide.xml @@ -578,7 +578,7 @@ Enea_NFV_Access_uCPEManager_<version>-build<build_number>.tar.gz High Availability Configurations: - + Specify the IP address of the local interface: The CentOS 7 Server loopback address: @@ -593,19 +593,35 @@ Enea_NFV_Access_uCPEManager_<version>-build<build_number>.tar.gz - Heap Configuration: Please enter the new - Maximum Heap Size [4g]: + Create the self-signed certificate: Specify IP or domain name + (or press Enter to skip): + + The Tomcat self-signed certificate can be generated + again by running the + createCertificate.sh. For more details, please see Tomcat Certificate + Generation in the Manual. + + + The generation of the Tomcat self-signed cerificate + should be skipped only if another certifcate will be + provided. + - Create the self-signed certificate: Specify IP - or domain name: - - - The certificate can be generated again by running the - createCertificate script from the - distribution folder. - + Heap Configuration: + + + + Please enter the new Maximum Heap Size + [4g]: + + @@ -1236,4 +1252,4 @@ of=/dev/sdb bs=4M conv=fsync - \ No newline at end of file + diff --git a/doc/book-enea-edge-getting-started/doc/upgrade_ena.xml b/doc/book-enea-edge-getting-started/doc/upgrade_ena.xml index 80473cb..ac2ebb6 100644 --- a/doc/book-enea-edge-getting-started/doc/upgrade_ena.xml +++ b/doc/book-enea-edge-getting-started/doc/upgrade_ena.xml @@ -1,9 +1,9 @@ - + Upgrading Enea Edge Enea provides regular releases that will require the upgrading of Enea - Edge components. The Enea Edge Management application must be upgraded + Edge components. The Enea Edge Management application must be upgraded first, followed by upgrading the Enea Edge Runtime on the uCPE devices. @@ -116,8 +116,7 @@ Enea_NFV_Access_uCPEManager_<version>-build<build_number>.tar.gz - Enter - <uCPEM-installerdir>/dist. + Enter <uCPEM-installerdir>/dist. @@ -165,7 +164,7 @@ Enea_NFV_Access_uCPEManager_<version>-build<build_number>.tar.gz Enter <uCPEM-installerdir>/dist. - + Run the following command with the root user and change @@ -602,7 +601,7 @@ Enea_NFV_Access_uCPEManager_<version>-build<build_number>.tar.gz - Select Operations, then + Select Operations, then Upgrade, enter the Release Name and press Execute. Filling in the Restore diff --git a/doc/book-enea-edge-release-info/doc/known_bugs_and_limitations.xml b/doc/book-enea-edge-release-info/doc/known_bugs_and_limitations.xml index 0fdb9aa..81816a5 100644 --- a/doc/book-enea-edge-release-info/doc/known_bugs_and_limitations.xml +++ b/doc/book-enea-edge-release-info/doc/known_bugs_and_limitations.xml @@ -129,47 +129,10 @@ - ELCCR-1351The updated - .Keystore and server.xml files - from the - /opt/ems/ucpemanager/application/3rdParty/apache-tomcat/conf/ - folder are overwritten during a product upgrade. As a workaround for - this issue, after an upgrade, copy the updated - .Keystore and server.xml files - into the - /opt/ems/ucpemanager/application/3rdParty/apache-tomcat/conf/ - folder and restart the ucpemanager service. - - - - ELCCR-1371The current self-signed certificate for - the Enea Edge Management application is generated at build time, with a - hard-coded common-name causing the uCPE device upgrade to fail in HTTPS - mode. As a workaround, another certificate (containing an IP based - common-name) must be generated. - - Perform the following the steps to generate the - certificate: - - - - Stop the Edge Management service. - - - - Create the certificate using the - createCertificate.sh script from distribution - folder. This will create a new .Keystore file - and copy it into the - /opt/ems/ucpemanager/application/3rdParty/apache-tomcat/conf/config/certificates - folder. - - - - Start the Enea Edge Management application, the new - certificate should now take effect. - - + ELCCR-1561Before starting an Enea Edge Management + upgrade, any owned Tomcat certificates should be manually copied into the + /opt/ems/ucpemanager/application/3rdParty/apache-tomcat/conf/config/certificates + folder. @@ -213,4 +176,4 @@ - \ No newline at end of file + -- cgit v1.2.3-54-g00ecf