瀏覽代碼

added -extfile to server certificate documentation for support of
subjectAltName=IP:x.x.x.x
this allows for connecting to the docker server from docker client
using the dns name OR using the IP address (lots of docker stuff
prefers IP addresses)

Signed-off-by: Greg Fausak <greg@tacodata.com>

Greg Fausak 10 年之前
父節點
當前提交
df8d807102
共有 1 個文件被更改,包括 8 次插入1 次删除
  1. 8 1
      docs/sources/articles/https.md

+ 8 - 1
docs/sources/articles/https.md

@@ -71,8 +71,15 @@ name) matches the hostname you will use to connect to Docker:
 
 Next, we're going to sign the public key with our CA:
 
+Since tls connections can be made via IP address as well as dns name,
+this extension allows for your client to connect via IP address.  You will
+need to replace $YOUR_IP_ADDRESS with your IP address. If there
+is more than one simply continue to add them separated by commas.
+
+    $ echo subjectAltName = IP:$YOUR_PUBLIC_IP > extfile.cnf
+
     $ openssl x509 -req -days 365 -in server.csr -CA ca.pem -CAkey ca-key.pem \
-      -CAcreateserial -out server-cert.pem
+      -CAcreateserial -out server-cert.pem -extfile extfile.cnf
     Signature ok
     subject=/CN=your.host.com
     Getting CA Private Key