Applicability
This topic applies only to OCP Enterprise Edition. OCP Community Edition does not provide this feature.
To facilitate certificate management, OCP provides a certificate management feature for storing and managing certificate files. You can upload certificate files and private key files to OCP, including the CA certificate, server certificate, and server certificate private key. These three files constitute a certificate file set, all of which must have the .pem extension.
Prerequisites
Ensure that the current user logged in to OCP has the ADMIN or ORG_ADMIN role.
If SSL encryption is enabled within the same cluster, ensure that the root certificate
ca.pemremains consistent between OceanBase and OBProxy in the cluster.
Procedure
Log in to OCP.
In the left navigation bar, click System Management > Certificate Management to go to the Certificate Management page.
Click Upload Certificate in the upper-right corner.
In the dialog box, specify or select the following information.
InformationDescriptionCertificate Name The certificate name must be unique. - It must start with a letter and end with a letter or number.
- It must be 2 to 32 characters long.
- The only supported special character is an underscore (_).
Upload Certificate You can upload up to three pem files at a time. Ensure the uploaded certificate files are valid and comply with the usage specifications for OBProxy and OceanBase Database. The files must include the CA certificate, server certificate, and server certificate private key; otherwise, SSL encryption may fail. Remarks Add any additional notes for the uploaded certificate. Click Upload.
