SSL and HTTPS
You can configure Incredibuild to use secure communication between internal components (SSL), and to use HTTPS when accessing the Incredibuild user interfaces. When this setting is enabled, traffic is automatically redirected from HTTP to HTTPS, and the port 8081 is used instead of 8080.
To Enable SSL Using Incredibuild's Self-Signed Certificate
Go to the Coordinator Settings > Network tab and use the SSL checkbox (disabled by default):
Enable SSL Using a Custom SSL Certificate
If you want to use your own certificate instead of Increduild's self-signed certificate, you can upload your certificate manually.
-
Go to the Coordinator Settings > Network tab and check SSL.
-
Run the following script pointing to your certificate. Both the certificate and key must be base64 encoded and the key cannot be password protected.
/opt/incredibuild/management/ib_cert.sh install <cert> <key>
Run this script on every machine that you want to use this certificate.
-
Make sure that all machines in your environment trust the certificates you just added. Generally, this is done by adding the Certificate Authority's certificate to the trusted root store on every machine.
Switch Certificates
If you have more than one certificate loaded into Incredibuild, you can switch using the following command:
/opt/incredibuild/management/ib_cert.sh select ib|user
Regenerate Incredibuild's Self-Signed Certificate
If your certificate expired or you want to regenerate Incredibuild's certificate for any other reason, use the following command:
/opt/incredibuild/management/ib_cert.sh regenerate