Skip to content

Latest commit

 

History

History
48 lines (33 loc) · 1.34 KB

Configuring-ACME-with-PostgreSQL-Realm.adoc

File metadata and controls

48 lines (33 loc) · 1.34 KB
Raw

Configuring ACME with PostgreSQL Realm

Overview

This document describes the process to configure ACME responder to use a PostgreSQL realm.

Initializing PostgreSQL Realm

First, prepare a database (e.g. acme) and a user (e.g. acme) to access the database. Verify the database connection with the following command:

$ psql -h $HOSTNAME -d acme -U acme

Next, install PostgreSQL JDBC driver in /usr/share/pki/server/common/lib, for example:

$ dnf install postgresql-jdbc
$ ln -s /usr/share/java/postgresql-jdbc/postgresql.jar /usr/share/pki/server/common/lib

Configuring ACME Realm

A sample PostgreSQL realm configuration is available at /usr/share/pki/acme/realm/postgresql/realm.conf.

To use the PostgreSQL realm, copy the sample realm.conf into the /etc/pki/pki-tomcat/acme folder, or execute the following command to customize some of the parameters:

$ pki-server acme-realm-mod --type postgresql \
    -Dpassword=Secret.123

The realm.conf should look like the following:

class=org.dogtagpki.acme.realm.PostgreSQLRealm
url=jdbc:postgresql://<hostname>:5432/acme
user=acme
password=Secret.123