The configure_webserver.sh script performs the required actions to replace the existing TLS certificates used by the Image Artist web server. You can find this script in the nginx directory located within the Image Artist base installation directory.
View Available Options
To see all available parameters:
Replacing Certificates on the Image Artist Host
configure_webserver.sh should be executed when the Image Artist stack is undeployed.
configure_webserver.sh --certificate <NEW_CERT_FILE> --private-key <NEW_KEY_FILE> --remove-old-certs
Replace the placeholders (<NEW_CERT_FILE>, etc.) with the paths to your new certificate files.
Replacing Certificates on the HPC Cluster (Optional)
If Image Artist is configured to submit Batch Analysis jobs to a High-Performance Computing (HPC) cluster, the certificates must also be updated on the cluster nodes so that the cluster can securely communicate with the Image Artist host.
-
For Ubuntu-based HPC systems:
- Move the certificate to the system's trusted certificate directory:
/usr/local/share/ca-certificates/ - Run
update-ca-certificatesto register the new certificate.
- Move the certificate to the system's trusted certificate directory:
-
For Red Hat-based HPC systems:
- Ensure the
ca-certificatespackage is installed. - Copy both the server and CA certificates to:
/etc/pki/ca-trust/source/anchors/ - Update the trust store:
sudo update-ca-trust
- Ensure the
Final Step: Redeploy the Image Artist Stack
Refer to Image Artist: How do I redeploy/restart the container stack?
Comments
0 comments
Article is closed for comments.