# Configuring HTTPS in Core Server

# Configuring Site Bindings

1. Open the File Explorer and navigate to the C:\Program Files\OpeniT\Core\Configuration\httpd\Caddyfiles\settings folder.

2. Right-click on the site-bindings.caddy file.

3. Select Open with and choose a text editor of your choice (e.g., Notepad, Sublime Text, etc.).

4. Update the (site-bindings) block using the syntax:

    import <type>.template "<host>" "<port>"

   Name | Description

   --- | :--- type | The type of connection, either http or https. host | The host name of the machine. port | The TCP/IP port number used by the reporter website.

   Site Bindings Parameters

   
   

   Example

   import http.template "samplehost" "8080"

   To add site bindings with automatic certificate creation, add auto- before the type.

   Example

   import auto-https.template "server1.cloud.com" "443"

5. Save the changes.

1. Navigate to the /var/opt/openit/httpd/Caddyfiles/settings directory.

2. Edit site-bindings.caddy file.

3. Update the (site-bindings) block using the syntax:

    import <type>.template "<host>" "<port>"

   Name | Description

   --- | :--- type | The type of connection, either http or https. host | The host name of the machine. port | The TCP/IP port number used by the reporter website.

   Site Bindings Parameters

   
   

   Example

   import http.template "samplehost" "8080"

   To add site bindings with automatic certificate creation, add auto- before the type.

   Example

   import auto-https.template "server1.cloud.com" "443"

4. Save the changes.

# Configuring HTTPS with SSL Certificate and Key Extracted from PFX Certificate

The Open iT Core Server can use secure browsing(HTTPS) using either an SSL certificate and SSL key or a reverse proxy.

This section provides steps on extracting and using SSL certificate(.crt) and SSL key(.key) for secure browsing in case only a .pfx certificate is available.

1. Open a command prompt with Administrator level privileges.

2. Go to the directory where the .pfx certificate is (e.g., C:\Users\openit\Documents\openit_pfx).

3. Extract the private .key file from the certificate using openssl by running the following:

   "C:\Program Files\OpeniT\Core\External\Apache\bin\openssl.exe" pkcs12 -in <pfx_cert_path_and_filename> -nocerts -out <output_file>

   Where:

   • <pfx_cert_path_and_filename> is the path to the .pfx certificate.

   • <output_file> will be the name of the private .key file.

   Example

   "C:\Program Files\OpeniT\Core\External\Apache\bin\openssl.exe" pkcs12 -in certificate.pfx -nocerts -out private.key

   When prompted for the import password, type the password used to protect the keypair when the .pfx file is created. Provide a new password to protect the .key file being created. Store the password of the key file in a secure place to avoid misuse.

4. Extract the .crt file from the certificate using openssl by running the following:

   "C:\Program Files\OpeniT\Core\External\Apache\bin\openssl.exe" pkcs12 -in <pfx_cert_path_and_filename> -clcerts -nokeys -out <output_file>

   Where:

   • <pfx_cert_path_and_filename> is the path to the .pfx certificate.

   • <output_file> will be the name of the .crt file.

   Example

   "C:\Program Files\OpeniT\Core\External\Apache\bin\openssl.exe" pkcs12 -in certificate.pfx -clcerts -nokeys -out server.crt

5. Decrypt the generated private key by running the following:

   "C:\Program Files\OpeniT\Core\External\Apache\bin\openssl.exe" rsa -in <private_key_file> -out <output_file>

   Where:

   • <private_key_file> is the path to generated private .key.

   • <output_file> will be the name of the .key file.

   Example

   "C:\Program Files\OpeniT\Core\External\Apache\bin\openssl.exe" rsa -in private.key -out server.key

6. Go to the directory where the .pfx certificate is and verify that the .crt and .key files are created.

   

   Generated Certificates
   
   

7. Copy server.crt to C:\Program Files\OpeniT\Core\Configuration\httpd\ssl.crt.

   

   Copy Certificate
   
   

8. Copy server.key to C:\Program Files\OpeniT\Core\Configuration\httpd\ssl.key.

   

   Copy Decrypted Key
   
   

9. Restart the OpeniTReverseProxy service.

# Configuring HTTPS using Let's Encrypt

This section provides steps for using Let's Encrypt to enable secure browsing.

1. Go to C:\Program Files\OpeniT\Core\Configuration\httpd\Caddyfiles\settings and open auto-https.template in a text editor.

   

   https.template file
   
   

2. Provide the Core Server URL and port on line 1.

   auto-https.template

    1|https://{args.0}:{args.1} {
    2|     import main
    3|}

   Example

    1|https://customer.domain.com:443 {
    2|     import main
    3|}

3. Save the changes.

4. Restart the OpeniTReverseProxy service.

# Next Steps?

After configuring HTTPS, the following steps are recommended but not required.

   Adding a Text File Source  

   Configuring Mapping Files