How to use SSL on Mac running Server

[paul55391]

I have a Mac mini running Server on which I want to run the calibre Content Server. For added security I want to access calibre using SSL, but I’ve been unsuccessful.

I can access my website on the Mac mini (using https), but I can’t access calibre (when I append the 8080 port number to the URL).

I suspect that I need to fill in two fields in the “Sharing over the net” Preferences panel: (1) Path to the SSL certificate file and (2) Path to the SSL private key file.

Can anyone confirm that I am on the right path? (No pun intended)

And if so, where can I find these two files on a Mac system?

[gbm]

Originally Posted by paul55391

I have a Mac mini running Server on which I want to run the calibre Content Server. For added security I want to access calibre using SSL, but I’ve been unsuccessful.

I can access my website on the Mac mini (using https), but I can’t access calibre (when I append the 8080 port number to the URL).

I suspect that I need to fill in two fields in the “Sharing over the net” Preferences panel: (1) Path to the SSL certificate file and (2) Path to the SSL private key file.

Can anyone confirm that I am on the right path? (No pun intended)

And if so, where can I find these two files on a Mac system?

You will have to generate your own certificate. Then enter the path into calibre.

See: https://stackoverflow.com/questions/...enssl#10176685

this is the command I used on my lunix system.

openssl req -x509 -newkey rsa:4096 -keyout calibre_key.pem -out calibre_cert.pem -days 730 -nodes

bernie

[paul55391]

Thanks. It looks like I'm on the right track. A couple questions:
(1) The Mac Server already has a Self-Signed certificate. Can I use that instead of generating a new one with openssl?
(2) Whichever certificate I use do the certificate and key go in /etc/ssl? (And who should own them?)

[gbm]

Originally Posted by paul55391

Thanks. It looks like I'm on the right track. A couple questions:
(1) The Mac Server already has a Self-Signed certificate. Can I use that instead of generating a new one with openssl?
(2) Whichever certificate I use do the certificate and key go in /etc/ssl? (And who should own them?)

Then you should not need new certificate or to enter the path.
see:
https://manual.calibre-ebook.com/ser...-other-servers

Here, we will show you how to integrate the calibre Content server into another server. The most common reason for this is to make use of SSL or to serve the calibre library as part of a larger site. The basic technique is to run the calibre server and setup a reverse proxy to it from the main server.

A reverse proxy is when your normal server accepts incoming requests and passes them onto the calibre server. It then reads the response from the calibre server and forwards it to the client. This means that you can simply run the calibre server as normal without trying to integrate it closely with your main server.

You are on your own as far as setting up the Mac Server as a reverse proxy.

bernie