Change IPP Checkin to IPPS¶
The seal-ipp-checkin service supports both IPP and IPPS. By default, the service listens to the port 631 and uses IPP, that means ipp://:631. With IPPS, the port 443 is used.
This is how you change the seal-ipp-checkin service to IPPS:
-
Set the
SERVICE_URLkey for theseal-ipp-checkinservice toipps://:443. If you want the IPP checkin to listen on both the IPP and the IPPS port, setSERVICE_URLtoipp://:631 ipps://:443for theseal-ipp-checkinservice.Hint - configuration path
In Consul, the key is specified with
dc/home/env/service/checkin/tag/ipp/SERVICE_URL. -
When configuring the key via Consul, the
seal-ipp-checkinservice will be restarted automatically.Hint - certificate only for the
seal-ipp-checkinserviceIt is not always possible to change the TLS certificates for all services as the internal communication uses server names different from the FQDNs of the servers, refer to Secure the PLOSSYS 5 Services. However, you can tell only the
seal-ipp-checkinservice to use a provided certificate without changing the certificates for the other services. For this, set thedc/home/env/service/checkin/tag/ipp/TLS_DIRkey to the directory that contains thekey.pemandcert.pemfiles to be used by theseal-ipp-checkinservice.