arno/gencert
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

update

Browse Source
This commit is contained in:
Andy 2018-06-30 20:40:04 +02:00
parent d62b58ba26
commit 227a96eb99
Signed by: arno
GPG Key ID: 9076D5E6B31AE99C
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
README.md
View File

@ -23,21 +23,21 @@ self-signed CA.
## Example usage
### Minio server with Traefik example
1. Replace "minio server" command with the following one:
- "cd /root/.minio/certs && ./gencert.sh --cn minio.example.com && minio server"
2. Copy the CA certificate "ca.crt" file to "/usr/local/share/ca-certificates/" and
run "update-ca-certificates" command which will update
"/etc/ssl/certs/ca-certificates.crt" file.
1. Replace ``minio server`` command with the following one:
- ``cd /root/.minio/certs && ./gencert.sh --cn minio.example.com && minio server /data``
2. Copy the CA certificate ``ca.crt`` file to ``/usr/local/share/ca-certificates/`` and
run ``update-ca-certificates`` command which will update
``/etc/ssl/certs/ca-certificates.crt`` file.
3. Restart Traefik.
> NOTE: Steps 2. and 3. will need to be repeated each time you get a new CA
> certificate. Then they can be automated this way:
> - Start Traefik with this command:
> sh -c "update-ca-certificates && traefik"
> while "/usr/local/share/ca-certificates" path is a host mounted
> ``sh -c "update-ca-certificates && traefik"``
> while ``/usr/local/share/ca-certificates`` path is a host mounted
> path with the CA certificate produced by this script.
> NOTE: I am using Alpine Traefik image, the correct ca certificates path is
> "/usr/local/share/ca-certificates/", otherwise one of these
> ``/usr/local/share/ca-certificates/``, otherwise one of these
> https://golang.org/src/crypto/x509/root_linux.go
## Script logic