Merge pull request #6167 from tengqm/certificate-fix

Fix openssl command for generating apiserver cert
2017-11-03 20:42:20 +08:00
parent d49a3dda8e 90fe42a2ff
commit 17330cd0c9
1 changed files with 3 additions and 1 deletions
@@ -126,7 +126,9 @@ Finally, add the following parameters into API server start parameters:
        openssl req -new -key server.key -out server.csr -config csr.conf
 1.  Generate the server certificate using the ca.key, ca.crt and server.csr:

-        openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 10000
+        openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \
+        -CAcreateserial -out server.crt -days 10000 \
+        -extensions v3_ext -extfile csr.conf
 1.  View the certificate:

        openssl x509  -noout -text -in ./server.crt