Version Data Mover 2.1.12 iS RELEASED
See the Release Notes
Ctrlk
HomepageBlog
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Enable SSL Certificate Container accessible on S3 Protocol

Containers on S3 are accessible via HTTP by default. To enable data encryption, you can add an SSL Certificate.

Self-Signed Certificate

Preamble

We consider in this example the following parameters

  • Certificate validity period of key SSL is 365 days

  • Private key file name is "private.key"

  • Certificate file name is "public.crt"

  • Server IP address is "10.x.x.x"

Creation of the self-signed certificate

$ cd /root/.minio/certs/ 
$ sudo openssl11 req -x509 -newkey rsa:4096 -sha256 -days 365 
-nodes -keyout ./private.key -out ./public.crt -subj "/CN=nodeum.domain.local" -
addext "
subjectAltName=DNS:nodeum.domain.local,DNS:localhost,IP:0.0.0.0,IP:127.0.0.1,
IP:10.x.x.x"
Generating a RSA private key
................................................................................++++
................................................................................++++
writing new private key to './private.key'
-----

Once done, it's required to restart the MINIO service :

After restarting the Minio service, use this command to verify that the API and Console are secured with HTTPS.

Ensure that 'https' appears in these lines:

PreviousAdd a SSL CertificateNextAdvanced Settings: Proxy Configuration

Last updated

Was this helpful?