Configuring SSL
MetaDefender Update Downloader supports accessing Web UI and REST interface via HTTPS. This feature is not allowed by default, however. To allow the feature you should modify Update Downloader Server configuration by following the next steps:
MetaDefender Update Downloader only accept the file named ssl.conf.mddownloader for SSL configuration.
The user need to take care about the permission of the file ssl.conf.mddownloader
Create file ssl.conf.mddownloader in the directory
- Linux
/etc/ometadownloader/nginx.d
- Windows: in the directory <Installation Directory>\nginx.
- Linux
Enter SSL-configuration according to Nginx. To allow simple SSL one needs to add the following lines only:
ssl on;
ssl_certificate /etc/ometadownloader/nginx.d/your.crt;
ssl_certificate_key /etc/ometadownloader/nginx.d/your.key;
- Service restart is required to take these changes into effect.
Note that certificate and key files are to provided by the user who can store them whenever it is convenient. Please adjust the paths accordingly.
Note: When choosing location for cert and key files, make sure they are readable by the service user as well as the directory is executable by it.
For more SSL-options please consult Nginx documentation.