Skip to content
Docs sslbrain sslbrain.com

Servers sslbrain does not know

Copy link to the page “Servers sslbrain does not know”

Install certificates for a service without a ready-made integration by uploading your own integration.

What you need

Copy link to the section “What you need”
  • A script that installs the certificate and makes the service load it.
  • A test server with a service agent and a service found by discovery.
  • An Owner who can upload the integration.

Upload and use your integration

Copy link to the section “Upload and use your integration”
  1. Package the script and agent.yml using the instructions for Windows or Linux. Set the certificate format with cert_format, see Variables.
  2. Try the script on the test server with a test certificate before using it in production.
  3. Upload the integration under Appliance › Integrations › Catalogue.
  4. Allow it on the server as described under Allow your integration.
  5. Create an installation plan. Select the discovered service and choose your integration for it before starting the installation plan, see Select the services.

Check that it works

Copy link to the section “Check that it works”

Open Installation plans › Runs and check that the run shows Completed. Then check that the service presents the expected certificate as described in Check that it works.

If it fails

Copy link to the section “If it fails”
  • The server cannot be selected → click Run discovery on the server so the service is found. Services cannot be added by hand.
  • The service agent rejects the signature → check permission and the appliance’s key under Allow the integration on the server.
  • The run fails → open the script’s output under Installation plans › Runs, correct the cause and retry the installation.

Allow your integration on the server

Copy link to the section “Allow your integration on the server”

Select Allow own scripts from this appliance when adding the server, or turn it on under Own scripts on the server’s page. This makes the server trust the appliance’s signing key, see Allow the integration on the server.

When you change the script

Copy link to the section “When you change the script”

The appliance signs the integration at upload. If you change the script, upload a version containing the changed code. The service agent rejects code that does not match its signature, see Signing.