Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Create the following folder structure on your local drive to hold the various certificates in the hierarchy that we will be generating:

ChariotCerts/

├── ca/

│  ├── engine/
│  ├── server/
│  └── transmission/
└── certs/
    ├── engine/
    ├── server/
    └── transmission/

OR

ChariotCerts/

├── rootCA/

│  ├── engineclientCA/
│  ├── serverCA/
│  └── transmissionclientCA/
└── certs/
    ├── engineclientCA/
    ├── serverCA/
    └── transmissionclientCA/

...

You should have the following files created:

ChariotCerts/

├── ca/

   ├── ca.crt

   ├── ca.key

...

We have now generated all the certificates and keys needed to setup SSL connections between Chariot and the MQTT Engine and MQTT Transmission modules:

ChariotCerts/

├── ca/

│   ├── ca.crt

│   ├── ca.key

...

Tip

Keytool is part of the standard java distribution and is located in the bin sub-directory of your jdk installation directory. Chariot will always include a java distribution under the <chariot_install_dir>/lib/runtime/jdk11.0.12_7/bin

We recommend adding the keytool PATH in the Windows environment variables. You will need to restart your command window to pick up this configuration change.


Code Block
languagetext
keytool -list -v -keystore <chariot_install_dir>/security/clientcerts.jks

...

*** If you do not see MQTT Transmission connected, verify that you have a Transmitter with a valid Sparkplug ID either through setting the Group and Edge ID or through the TagPath***

|—— ca

|

├── [        256]  ca

│   ├── [       1367]  ca.crt

│   ├── [       1743]  ca.key

│   ├── [         17]  ca.srl

│   ├── [        192]  engine

│   │   ├── [       1383]  engineCA.crt

│   │   ├── [       1143]  engineCA.csr

│   │   ├── [       1743]  engineCA.key

│   │   └── [         17]  engineCA.srl

│   ├── [        192]  server

│   │   ├── [       1375]  serverCA.crt

│   │   ├── [       1139]  serverCA.csr

│   │   ├── [       1751]  serverCA.key

│   │   └── [         17]  serverCA.srl

│   └── [        192]  transmission

│       ├── [       1391]  transmissionCA.crt

│       ├── [       1151]  transmissionCA.csr

│       ├── [       1743]  transmissionCA.key

│       └── [         17]  transmissionCA.srl

└── [        160]  certs

    ├── [        160]  engine

    │   ├── [       1395]  engine.crt

    │   ├── [       1139]  engine.csr

    │   └── [       1675]  engine.key

    ├── [        160]  server

    │   ├── [       1383]  server.crt

    │   ├── [       1135]  server.csr

    │   └── [       1675]  server.key

    └── [        160]  transmission

        ├── [       1411]  transmission.crt

        ├── [       1147]  transmission.csr

        └── [       1675]  transmission.key