To enable secure XMPP, the following parameters are configured at the XMPP server. On the control node, enable the parameters in the configuration file:
/etc/contrail/contrail-control.conf . xmpp_server_cert=/etc/contrail/ssl/certs/server.pem xmpp_server_key=/etc/contrail/ssl/private/server-privkey.pem xmpp_ca_cert=/etc/contrail/ssl/certs/ca-cert.pem xmpp_auth_enable=true Configuring Compute Node for XMPP Client To enable secure XMPP, the following parameters are configured at the XMPP client.On the compute node, enable the parameters in the configuration file:
/etc/contrail/contrail-vrouter-agent.conf xmpp_server_cert=/etc/contrail/ssl/certs/server.pem xmpp_server_key=/etc/contrail/ssl/private/server-privkey.pem xmpp_ca_cert=/etc/contrail/ssl/certs/ca-cert.pem xmpp_auth_enable=true Once the aforementioned changes are completed on the appropriate .conf files, restart contrail-control service on the control node and the contrail-vrouter-agent on the compute node.