Skip to content

Commit c9ff8f5

Browse files
committed
DOC-5210 Feedback update to add shared and separate INE cert examples for rladmin and REST API
1 parent 66bd535 commit c9ff8f5

File tree

1 file changed

+29
-3
lines changed

1 file changed

+29
-3
lines changed

content/operate/rs/security/encryption/internode-encryption.md

Lines changed: 29 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -168,15 +168,41 @@ tab3="REST API" >}}
168168
169169
-tab-sep-
170170
171-
Run [`rladmin cluster certificate`]({{< relref "/operate/rs/references/cli-utilities/rladmin/cluster/certificate" >}}):
171+
To use the same certificate for data and control plane internode encryption, run the following [`rladmin cluster certificate`]({{< relref "/operate/rs/references/cli-utilities/rladmin/cluster/certificate#cluster-certificate-set-internal" >}}) command:
172172
173173
```sh
174-
rladmin cluster certificate set internal dpine_certificate_file <path-to-file> dpine_key_file <path-to-file> cpine_certificate_file <path-to-file> cpine_key_file <path-to-file>
174+
rladmin cluster certificate set internal dpine_certificate_file <path-to-shared-cert> dpine_key_file <path-to-shared-key> cpine_certificate_file <path-to-shared-cert> cpine_key_file <path-to-shared-key>
175+
```
176+
177+
To use separate certificates for data and control plane internode encryption, run the following [`rladmin cluster certificate`]({{< relref "/operate/rs/references/cli-utilities/rladmin/cluster/certificate#cluster-certificate-set-internal" >}}) command:
178+
179+
```sh
180+
rladmin cluster certificate set internal dpine_certificate_file <path-to-dpine-cert> dpine_key_file <path-to-dpine-key> cpine_certificate_file <path-to-cpine-cert> cpine_key_file <path-to-cpine-key>
175181
```
176182
177183
-tab-sep-
178184
179-
Send a [`PUT /v1/cluster/certificates`]({{< relref "/operate/rs/references/rest-api/requests/cluster/certificates#put-cluster-certificates" >}}) request:
185+
To use the same certificate for data and control plane internode encryption, send a [`PUT /v1/cluster/certificates`]({{< relref "/operate/rs/references/rest-api/requests/cluster/certificates#put-cluster-certificates" >}}) request:
186+
187+
```sh
188+
PUT https://<host>:<port>/v1/cluster/certificates
189+
{
190+
"certificates": [
191+
{
192+
"name": "ccs_internode_encryption",
193+
"key": "<shared-private-key>",
194+
"certificate": "<shared-certificate-chain>"
195+
},
196+
{
197+
"name": "data_internode_encryption",
198+
"key": "<shared-private-key>",
199+
"certificate": "<shared-certificate-chain>"
200+
}
201+
]
202+
}
203+
```
204+
205+
To use separate certificates for data and control plane internode encryption, send a [`PUT /v1/cluster/certificates`]({{< relref "/operate/rs/references/rest-api/requests/cluster/certificates#put-cluster-certificates" >}}) request:
180206
181207
```sh
182208
PUT https://<host>:<port>/v1/cluster/certificates

0 commit comments

Comments
 (0)