update readme

This commit is contained in:
Andy 2018-07-11 09:42:57 +02:00
parent b6ee6d3ce2
commit f06df3a906
Signed by: arno
GPG Key ID: 9076D5E6B31AE99C

View File

@ -32,9 +32,9 @@ used by the client in order to validate the server's certificate.
- warn if the CA certificate is about to expire (<30 days till expiration) - warn if the CA certificate is about to expire (<30 days till expiration)
- regenerate the CA certificate if it finds it has expired - regenerate the CA certificate if it finds it has expired
> - The CA certificate will be valid for 3650 days (10 years) > The CA certificate will be valid for 3650 days (10 years)
> - The server certifcate will be valid for 365 days (1 year) > The server certifcate will be valid for 365 days (1 year)
> - The x509 certs are ECDSA with prime256v1 curve and SHA256 signatures > The x509 certs are ECDSA with prime256v1 curve and SHA256 signatures
## Examples ## Examples
@ -93,8 +93,3 @@ script in the following Linux distributions:
- CentOS 7 - CentOS 7
> Alpine 3.4 - as it has old getent which [misses](https://git.alpinelinux.org/cgit/aports/commit/?id=2e4493888fff74afc6a6ef6257aeea469df32af5) ahostsv4 > Alpine 3.4 - as it has old getent which [misses](https://git.alpinelinux.org/cgit/aports/commit/?id=2e4493888fff74afc6a6ef6257aeea469df32af5) ahostsv4
## Drawbacks
- [operational] it requires self-signed CA certs shared when running multiple
Minio (or any other) servers;