Tableau Server的私有SSL憑證建立

Tableau server預設採用HTTP連線，若要用到加密的HTTPS連線就必須要為Tableau Server產生SSL金鑰作為連線加密交換使用。
正常來說，公開網站的SSL金鑰會透過憑證機構來做最後發行，這樣的金鑰才會被多數的瀏覽器所信任。
但私有環境中，如果不想花錢通常就是伺服器自行簽發憑證。
而自行簽發的憑證，使用上不會有問題，但因為是瀏覽器不信任的發行機構，所以連到網頁是都會跳出告警訊息。可以每次開啟網頁時都手動略過此訊息，或者直接將憑證加入"受信任的根憑證授權單位"，未來瀏覽器就不會告警了。

原廠的文件在此
http://kb.tableau.com/articles/knowledgebase/creating-ssl-certificate-and-key-tableau-server#generate-key
下面的範例是建立"私有的SSL憑證"
指令與過程的內容，與原廠KB差異在於未經過發行機構，直接轉出憑證(server.crt)。
參數的意義請自行 google openssl 文件，不在此說明。
c:\set OPENSSL_CONF=c:\Program Files\Tableau\Tableau Server\9.0\apache\conf\openssl.cnf
c:\Program Files\Tableau\Tableau Server\9.0\apache\bin>openssl genrsa -out server.key 4096
Loading 'screen' into random state - done
Generating RSA private key, 4096 bit long modulus
.............................................................++
................................................................................
................................................................................
...................................++
e is 65537 (0x10001)
c:\Program Files\Tableau\Tableau Server\9.0\apache\bin>openssl req -new -x509 -nodes -sha1 -days 365 -key server.key -out server.crt
Loading 'screen' into random state - done
You are about to be asked to enter information that will be incorporated into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [AU]:TW
State or Province Name (full name) [Some-State]:
Locality Name (eg, city) []:Taipei
Organization Name (eg, company) [Internet Widgits Pty Ltd]:
Organizational Unit Name (eg, section) []:support
Common Name (e.g. server FQDN or YOUR name) []:tableau.lab.com
Email Address []:admin@lab.com
取得server.key & server.crt 之後, 就可以匯入Tableau Server, 這段很簡單就先不寫了。
PS. 一旦啟用SSL, 如果是私自發行的憑證, 使用tableau desktop & tabcmd 連接server也都會因為憑證而有連線問題。請到KB找答案。