Custom TLS Certificate

If you don’t want to use the initial self-signed certificate, you can install your own. To do so, you need to access the container and modify the config file.

To access the container, you can either login to our web interface and navigate to the admin console, or you start a ssh session to your node and execute docker exec -it croit bashbefore. As soon as you are in the container, navigate to the config folder and update the config.yml`file:

cd /config
vi config.yml

We use a small subset of possible options in our default configuration. The section to look for is

server:
applicationConnectors:
- type: https
port: 443
keyStorePath: /config/selfsigned.pfx
keyStorePassword: insecure
keyStoreType: PKCS12

To update your certificate, please put your preferred certificate in the /config folder and correct the keyStorePath setting to your file name.

Ensure that all TLS options are correctly configured according to your needs. You can find a list of possible TLS options in Dropwizard’s documentation.