arno/gencert
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

update

Browse Source
This commit is contained in:
Andy 2018-06-30 20:40:04 +02:00
parent d62b58ba26
commit 227a96eb99
Signed by: arno
GPG Key ID: 9076D5E6B31AE99C
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
README.md
View File

@ -23,21 +23,21 @@ self-signed CA.
## Example usage ## Example usage
### Minio server with Traefik example ### Minio server with Traefik example
1. Replace "minio server" command with the following one: 1. Replace ``minio server`` command with the following one:
- "cd /root/.minio/certs && ./gencert.sh --cn minio.example.com && minio server" - ``cd /root/.minio/certs && ./gencert.sh --cn minio.example.com && minio server /data``
2. Copy the CA certificate "ca.crt" file to "/usr/local/share/ca-certificates/" and 2. Copy the CA certificate ``ca.crt`` file to ``/usr/local/share/ca-certificates/`` and
run "update-ca-certificates" command which will update run ``update-ca-certificates`` command which will update
"/etc/ssl/certs/ca-certificates.crt" file. ``/etc/ssl/certs/ca-certificates.crt`` file.
3. Restart Traefik. 3. Restart Traefik.
> NOTE: Steps 2. and 3. will need to be repeated each time you get a new CA > NOTE: Steps 2. and 3. will need to be repeated each time you get a new CA
> certificate. Then they can be automated this way: > certificate. Then they can be automated this way:
> - Start Traefik with this command: > - Start Traefik with this command:
> sh -c "update-ca-certificates && traefik" > ``sh -c "update-ca-certificates && traefik"``
> while "/usr/local/share/ca-certificates" path is a host mounted > while ``/usr/local/share/ca-certificates`` path is a host mounted
> path with the CA certificate produced by this script. > path with the CA certificate produced by this script.
> NOTE: I am using Alpine Traefik image, the correct ca certificates path is > NOTE: I am using Alpine Traefik image, the correct ca certificates path is
> "/usr/local/share/ca-certificates/", otherwise one of these > ``/usr/local/share/ca-certificates/``, otherwise one of these
> https://golang.org/src/crypto/x509/root_linux.go > https://golang.org/src/crypto/x509/root_linux.go
## Script logic ## Script logic