Removed unessary caracters when outputing the CA key hash using openssl (#5784)
* Removed unessary caracters when outputing the CA key hash using openssl Removed unessary caracters when outputing the CA key hash using openssl. * Changed CA key gathering cmd Changed CA key gathering cmd to make it comatible with different versions of openssl
This commit is contained in:
committed by
Steve Perry
parent
0419d6f370
commit
5b0c2b6906
@@ -325,7 +325,7 @@ Here's an example on how to use it:
|
||||
[RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4)) and can also be
|
||||
calculated by 3rd party tools or provisioning systems. For example, using the
|
||||
OpenSSL CLI:
|
||||
`openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>&/dev/null | openssl dgst -sha256 -hex`
|
||||
`openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'`
|
||||
|
||||
_Skipping this flag is allowed in Kubernetes 1.8, but makes certain spoofing
|
||||
attacks possible._ See the [security model](#security-model) for details.
|
||||
|
||||
Reference in New Issue
Block a user