Upstream/harbor
1
0
Fork 0
mirror of https://github.com/goharbor/harbor.git synced 2025-01-09 09:27:42 +01:00
Code Issues Projects Releases Wiki Activity

modify openssl ca to openssl x509 for certificate format

Browse Source
This commit is contained in:
yhua 2016-11-11 18:39:24 +08:00
parent 977c5a80a0
commit e55aa47641
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/configure_https.md
View File

@ -39,14 +39,15 @@ On Ubuntu, the config file of openssl locates at **/etc/ssl/openssl.cnf**. Refer
If you're using FQDN like **reg.yourdomain.com** to connect your registry host, then run this command to generate the certificate of your registry host: If you're using FQDN like **reg.yourdomain.com** to connect your registry host, then run this command to generate the certificate of your registry host:
``` ```
openssl ca -in yourdomain.com.csr -out yourdomain.com.crt -cert ca.crt -keyfile ca.key -outdir . openssl x509 -req -days 365 -in yourdomain.com.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out yourdomain.com.crt
``` ```
If you're using **IP**, say **192.168.1.101** to connect your registry host, you may instead run the command below: If you're using **IP**, say **192.168.1.101** to connect your registry host, you may instead run the command below:
``` ```
echo subjectAltName = IP:192.168.1.101 > extfile.cnf echo subjectAltName = IP:192.168.1.101 > extfile.cnf
openssl ca -in yourdomain.com.csr -out yourdomain.com.crt -cert ca.crt -keyfile ca.key -extfile extfile.cnf -outdir . openssl x509 -req -days 365 -in yourdomain.com.csr -CA ca.crt -CAkey ca.key -CAcreateserial -extfile extfile.cnf -out yourdomain.com
.crt
``` ```
##Configuration and Installation ##Configuration and Installation
After obtaining the **yourdomain.com.crt** and **yourdomain.com.key** files, After obtaining the **yourdomain.com.crt** and **yourdomain.com.key** files,
@ -124,3 +125,4 @@ If you've mapped nginx 443 port to another, you need to add the port to login, l
update-ca-trust update-ca-trust
``` ```