FE SSL Certificate
Certificate Configuration
Certificate Configuration
To enable SSL function on Doris FE interface, you need to configure key certificate as follows:
1.Purchase or generate a self-signed SSL certificate. It is advised to use CA certificate in Production environment
2.Copy the SSL certificate to specified path. The default path is ${DORIS_HOME}/conf/ssl/
, and user can also specify their own path
3.Modify FE configuration file conf/fe.conf
, and note that the following parameters are consistent with purchased or generated SSL certificate
Set enable_https = true
to enable https function, default is false
Set certificate path key_store_path
, default is ${DORIS_HOME}/conf/ssl/doris_ssl_certificate.keystore
Set certificate password key_store_password
, default is null
Set certificate type key_store_type
, default is JKS
Set certificate alias key_store_alias
, default is doris_ssl_certificate