3.5. Configuring SSL

Metadefender Update Downloader supports accessing Web UI and REST interface via HTTPS. This feature is not allowed by default, however. To allow the feature you should modify Update Downloader Server configuration by following the next steps:

  1. Create file ssl.conf in the directory /etc/ometadownloader/nginx.d

  2. Enter SSL-configuration according to Nginx. To allow simple SSL one needs to add the following lines only:

    ssl on;
    ssl_certificate /etc/ometadownloader/nginx.d/your.crt;
    ssl_certificate_key /etc/ometadownloader/nginx.d/your.key;
  3. Service restart is required to take these changes into effect.

Note that certificate and key files are to provided by the user who can store them whenever it is convenient. Please adjust the paths accordingly.

Note: When choosing location for cert and key files, make sure they are readable by the service user as well as the directory is executable by it.

For more SSL-options please consult Nginx documentation.