> CDS > Hedvig S3 Protocol-Compatible Object Storage User Guide > Hedvig Object Storage Configuration

Setting Up an HTTPS-supported S3 Service

To enable an HTTPS-supported S3 Service, you generate Key, Certificate Signing Request (CSR), and Digital Certificate (CRT) files before you deploy the Hedvig Storage Proxy.

Procedure

Note

If you have existing key and certificate files, you can skip step 1.

  1. Generate three files: Key, Certificate Signing Request (CSR), and Digital Certificate (CRT).

    1. Key

      openssl genrsa -out ~/hedvigs3.key 2048

    2. CSR

      openssl req -new -sha256 -key ~/hedvigs3.key -out ~/hedvigs3.csr

      Important

      Put the storage proxy hostname or * to match all hostnames in this field, for example:

      Common Name (name or server hostname): s3proxyhost.hedviginc.com

    3. CRT

      openssl x509 -req -days 365 -in ~/hedvigs3.csr -signkey ~/hedvigs3.key -out hedvigs3.crt

  2. Deploy the Hedvig Storage Proxy.

    1. Copy both the hedvigs3.crt and hedvigs3.key files to the /var/log/hedvig directory on the Hedvig Storage Proxy.

    2. Update the <objectstore><s3> nested tag section of the Hedvig Storage Proxy configuration file (/var/log/hedvig/config.xml), as follows:

      1. <certfile> – Insert the path to the Certificate Signing Request (CSR) file.

      2. <keyfile> – Insert the path to the key file.

      3. <https> – Set to true to enable HTTPS.

    Setting Up an HTTPS-supported S3 Service

  3. Restart the S3 Service.

    service hedvigs3 restart

Loading...