admin:server_installation_3

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision		 Previous revision
admin:server_installation_3 [2023/07/24 11:09] – Ujwal Khatryadmin:server_installation_3 [2023/08/02 00:31] (current) – [SSL Certificate] Mark Glover
Line 176: Line 176:
 === Configure cache === === Configure cache ===
  
-**Edit** > **Database Settings** > **User settings for Data file**+**Edit** > **Settings** > **User settings for Data file**
  
 {{ :admin:user_settings_-_edit.png?800 |}} {{ :admin:user_settings_-_edit.png?800 |}}
Line 277: Line 277:
  
 ==== SSL Certificate ==== ==== SSL Certificate ====
-The mSupply server also has a webserver as mentioned here :+The mSupply server also has a webserver as mentioned [[web_interface:using_the_web_server#msupply_web_server|here.]]
  
-It is recommended that a public facing web server should have an SSL certificate installed. For the mSupply server a 'cert.pem'  and 'key.pem' need to be generated using the purchased SSL certificate that has been purchased from a SSL vendor. +It is recommended that a public facing web server should have an SSL certificate installed. For the mSupply server a 'cert.pem'  and 'key.pem' need to be generated using the SSL certificate that has been purchased from a SSL vendor. 
  
 Theses files needs to be stored inside the folder C:\Program Files\mSupply\mSupply Server\Server Database  as shown in the image below.  Theses files needs to be stored inside the folder C:\Program Files\mSupply\mSupply Server\Server Database  as shown in the image below. 
Line 287: Line 287:
 The cert.pem file contains the certificate in the following format and can have the root as well as the intermediate certificate. The cert.pem file contains the certificate in the following format and can have the root as well as the intermediate certificate.
  
 +<code>
 -----BEGIN CERTIFICATE----- -----BEGIN CERTIFICATE-----
 MIIGUzCCBTugAwIBAgIRAP9nsdfsfdsdfYH0oEZgg3k28WUoYQgQwDQYJKoZIhvc MIIGUzCCBTugAwIBAgIRAP9nsdfsfdsdfYH0oEZgg3k28WUoYQgQwDQYJKoZIhvc
Line 305: Line 305:
 Junk Junk
 -----END CERTIFICATE----- -----END CERTIFICATE-----
 +</code>
  
 The the key.pem file contains  The the key.pem file contains 
  
 +<code>
 -----BEGIN PRIVATE KEY----- -----BEGIN PRIVATE KEY-----
 MIIEvAIBADANBgkasasdfqhkiG9w0BhgghAQEFAASCBKYwggSiAgEAAoIBAQCqPA MIIEvAIBADANBgkasasdfqhkiG9w0BhgghAQEFAASCBKYwggSiAgEAAoIBAQCqPA
Line 317: Line 319:
 junk== junk==
 -----END PRIVATE KEY----- -----END PRIVATE KEY-----
 +</code>
 +
 +More recently we have moved towards using Caddy server software which setup a reverse proxy server which use Let's Encrypt to automatically update SSL certificates. This will avoid the need to manually watch and update expiring SSL 
 ==== Installing mSupply Client ==== ==== Installing mSupply Client ====
 Needed:  mSupply Client software of the same version (or relatively recent) as the mSupply Server. Needed:  mSupply Client software of the same version (or relatively recent) as the mSupply Server.
  • Last modified: 2023/07/24 11:09
  • by Ujwal Khatry