Belden thinklogical SMP2 - Appendix B: SSL Certificates for HTTPS; Appendix C: SMP2 File Locations

System Management Portfolio 2.0 Product Manual Rev. C, Feb. 2020
Page 66
Appendix B: SSL Certificates for HTTPS
Secure Sockets Layer (SSL) Certificates provide secure, encrypted communications between a
website (SMP2 web server) and an internet browser. SSL is the protocol that provides the encryption.
The location for the SSL certificates and keys on the SMP2 computer are contained in the following two
files:
Initial early version: Current version:
/opt/tl/smp2/file.pem /etc/ssl/private/smp2.pem
/opt/tl/smp2/file.crt /etc/ssl/private/smp2.crt
These original files, smp2.pem and smp2.crt, are Thinklogical self-issued certificates and are
intended to be place holders for a certificate from a recognized trusted certificate authority, to be
installed by the SMP2 administrator.
Note: The file naming convention must be maintained for proper web server operation.
To confirm the certificate’s expiration date, perform the following commands:
1.) From the Linux command line perform the ‘su’ command to login as the root user.
2.) Change the directory to the location of the certificate: cd /etc/ssl/private
3.) Execute the following command: openssl x509 -noout -in smp2.crt -dates
To generate new self-issued certificates:
1.) From the Linux command line perform the ‘su’ command to login as the root user.
2.) Change the directory to the location of the certificate: cd /etc/ssl/private
3.) Execute the following command:
openssl req -x509 -nodes -days 9999 -newkey rsa:2048 -keyout
smp2.pem -out smp2.crt
Note: 9999 days = ~ 27 years.
Note: Once the certificates have been acquired from an authorized source, they should
be stored in the location specified above (SSL Certificates), using the exact naming
convention shown above.
Appendix C: Key SMP2 File Locations (Accessible by root user only)
Configuration files:
/opt/tl/setup/stations.csv
/opt/tl/setup/tags.csv
/opt/tl/setup/tielines.csv
/opt/tl/setup/users.csv
/opt/tl/setup/macros – directory
Scripts:
/opt/tl/tools/userpwd.js
/opt/tl/tools/userpwd_README.txt
Internal use only:
/opt/tl/setup/syncSettings.json
/opt/tl/setup/redundancySettings.json
/opt/tl/cache/
/opt/tl/tools/keepalivedMod.sh
SSL Certificates:
/etc/ssl/private/smp2.pem
/etc/ssl/private/smp2.crt
Log files:
/var/log/tl-smp2.log
/var/log/tl-dash.log