influxdb配置https认证

1.下载生成CA证书

sudo openssl req -x509 -nodes -newkey rsa:2048 \
>   -keyout /etc/ssl/influxdb-selfsigned.key \
>   -out /etc/ssl/influxdb-selfsigned.crt \
>   -days 10
Generating a 2048 bit RSA private key
...................................+++
...................+++
writing new private key to '/etc/ssl/influxdb-selfsigned.key'
-----
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [XX]:
State or Province Name (full name) []:
Locality Name (eg, city) [Default City]:
Organization Name (eg, company) [Default Company Ltd]:
Organizational Unit Name (eg, section) []:
Common Name (eg, your name or your server's hostname) []:
Email Address []:

在/etc/ssl/目录下可以看到生成的2个文件：

[root@basic-server infuxdb]# ll ssl
总用量 8
-rw-r--r-- 1 root root 1302 9月  28 16:16 influxdb-selfsigned.crt
-rw-r--r-- 1 root root 1704 9月  28 16:16 influxdb-selfsigned.key

2.给证书赋权

root@2885d5258bd8:/# chmod 644 /etc/ssl/influxdb-selfsigned.crt 
root@2885d5258bd8:/# chmod 644 /etc/ssl/influxdb-selfsigned.key 

3.配置influxdb支持https

[http]
  enabled = true
  bind-address = ":8086"
  auth-enabled = true
  log-enabled = true
  write-tracing = false
  pprof-enabled = false
  https-enabled = true
  https-certificate = "/etc/ssl/influxdb-selfsigned.crt"
  https-private-key = "/etc/ssl/influxdb-selfsigned.key"
  max-row-limit = 10000

4.可以连接查看

influx -ssl -host <domain_name>.com

参考：influxdb https配置