Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Table of Contents

Info

The information from this article is valid, however, starting from the following releases HTTPS for a Master-Agent connection can be used without use of a proxy as explained with the JobScheduler Universal Agent - HTTPS Agent and Master Authentication article:

Display feature availability
StartingFromRelease1.10.5

Display feature availability
StartingFromRelease1.11

Scope

...

  • article describes the steps required to set up secure HTTPS communication.

...

Prerequisites

You will have to install one of the following software components for configuring your reverse proxy:

  • httpd
  • nginx would need to install httpd for configuring HTTPS connections on your serverYou would need to install nginx for configuring your reverse proxy

Get a TLS Certificate

A TLS certificate can be acquired by

  • buying a TLS certificate
  • creating a self-signed certificate

Configure a reverse proxy

JobScheduler Universal Agent itself does not provide configuration options to encrypt it's communication by HTTPS. The recommended solution is to run a reverse proxy on the same host but under a different user.

...

Info

This is the configurate for the file nginx.conf that is usually stored usually under /etc/nginx

Import the self-signed certificate into the Java Truststore of JobScheduler Master

This step is not required if the TLS certificate was bought from a trusted certificate authority.

...

Info
  • Java keytool is usually under the bin folder for Java. in that case you search for the Java that you are using for the JobScheduler Master.

Configure JobScheduler Master to use the reverse proxy

The proxy URL along with the HTTPS keyword is configured in the process class for the Agent:

Code Block
languagexml
titleProcess class definition with HTTPS
<process_class  max_processes="20" remote_scheduler="https://agent_host:24445"/>

References