Removed unessary caracters when outputing the CA key hash using openssl (#5784)

* Removed unessary caracters when outputing the CA key hash using openssl

Removed unessary caracters when outputing the CA key hash using openssl.

* Changed CA key gathering cmd

Changed CA key gathering cmd to make it comatible with different versions of openssl
This commit is contained in:
Florian Woerner
2017-10-10 22:25:09 +02:00
committed by Steve Perry
parent 0419d6f370
commit 5b0c2b6906
+1 -1
View File
@@ -325,7 +325,7 @@ Here's an example on how to use it:
[RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4)) and can also be
calculated by 3rd party tools or provisioning systems. For example, using the
OpenSSL CLI:
`openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>&/dev/null | openssl dgst -sha256 -hex`
`openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'`
_Skipping this flag is allowed in Kubernetes 1.8, but makes certain spoofing
attacks possible._ See the [security model](#security-model) for details.