Set up a secure connection between the JobServer server and the JobServer client within
a Remote Engine.
Both the JobServer server and its client are installed inside your engine. When a Remote
Engine receives a request from Talend Management Console to run a
task, the JobServer client deploys artifacts to the JobServer server. The SSL connection
you are establishing thus secures this traffic between these two JobServer sides.
Note that the connection between Talend Management Console and
Talend Remote Engine
is secured by default, not impacted by this SSL configuration. The same is true for the
connection between Talend Studio and
Talend Remote Engine.
Procedure
-
Open the <RemoteEngineInstallationDirectory>/etc/org.talend.remote.jobserver.server.cfg
file to edit it.
-
Change the values of the following parameters:
org.talend.remote.jobserver.server.TalendJobServer.USE_SSL=true
org.talend.remote.server.ssl.keyStore=<path to JobServer keystore>
org.talend.remote.server.ssl.keyStorePassword=<JobServer keystore password>
Add
your specific values to the last two parameters.
-
Open the <RemoteEngineInstallationDirectory>/etc/system.properties
file to edit it.
-
Change the values of the following parameters:
org.talend.remote.client.ssl.force=true
org.talend.remote.client.ssl.trustStore=<path to truststore>
org.talend.remote.client.ssl.trustStorePassword=<truststore password>
Add
your specific values to the last two parameters.
-
Edit the <RemoteEngineInstallationDirectory>/bin/setenv
(for Linux) or
<RemoteEngineInstallationDirectory>/bin/setenv.bat (for
Windows) file to configure the JobServer client.
export JAVA_OPTS="${JAVA_OPTS} -Dorg.talend.remote.client.ssl.keyStore=<path_to_jobserver_client_keystore> -Dorg.talend.remote.client.ssl.keyStorePassword=<jobserver_client_keystore_password> -Dorg.talend.remote.client.ssl.trustStore=<path_to_jobserver_client_truststore> -Dorg.talend.remote.client.ssl.trustStorePassword=<jobserver_client_truststore_password> -Dorg.talend.remote.client.ssl.enabled.protocols=<jobserver_client_enabled_protocols> -Dorg.talend.remote.client.ssl.disablePeerTrust=false"
These
parameters represent the same SSL configuration previously set on the JobServer
server side.
-
Restart the engine.