HTTPS Does Not Work For Management Server

[fnavidan]

I'm running CloudStack 4.22.0.0. I'm trying to enable https for management server UI. I have done following steps:

• Obtained a valid certificate for my desired UI hostname
• Converted certificate and private key to PKCS12 format
• Imported certificate and private key into keystore located at /etc/cloudstack/management/cloud.jks
• Enabled https and set keystore password in server.properties file.
• Opened port 8443 in firewall
• Changed ownership of /etc/cloudstack/management/cloud.jks to user 'cloud'

However, after restarting management server, UI is only accessible via http.

I've already looked into management server log and no https or keystore related error is found.

Any idea?

[dahampere]

I run 3 management nodes, but I use haproxy to offload SSL, while load-balancing https traffic to keep things simple on the cloudstack end. With the upcoming SSL certificate renewal changes, this might be the safest and cleanest option going forward.