Certificate Configuration
Certificate Configuration
To enable SSL function on Doris FE interface, you need to configure key certificate as follows:
1.Purchase or generate a self-signed SSL certificate. It is advised to use CA certificate in Production environment
2.Copy the SSL certificate to specified path. The default path is ${DORIS_HOME}/conf/ssl/, and user can also specify their own path
3.Modify FE configuration file conf/fe.conf, and note that the following parameters are consistent with purchased or generated SSL certificate
Set enable_https = true to enable https function, default is false
Set certificate path key_store_path, default is ${DORIS_HOME}/conf/ssl/doris_ssl_certificate.keystore
Set certificate password key_store_password, default is null
Set certificate type key_store_type, default is JKS
Set certificate alias key_store_alias, default is doris_ssl_certificate
