From 5b0c2b69067e45c950184a3e5ef29fd0e5c9495b Mon Sep 17 00:00:00 2001 From: Florian Woerner Date: Tue, 10 Oct 2017 22:25:09 +0200 Subject: [PATCH] Removed unessary caracters when outputing the CA key hash using openssl (#5784) * Removed unessary caracters when outputing the CA key hash using openssl Removed unessary caracters when outputing the CA key hash using openssl. * Changed CA key gathering cmd Changed CA key gathering cmd to make it comatible with different versions of openssl --- docs/admin/kubeadm.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/admin/kubeadm.md b/docs/admin/kubeadm.md index 56e3991e3b..5bebbe5d96 100644 --- a/docs/admin/kubeadm.md +++ b/docs/admin/kubeadm.md @@ -325,7 +325,7 @@ Here's an example on how to use it: [RFC7469](https://tools.ietf.org/html/rfc7469#section-2.4)) and can also be calculated by 3rd party tools or provisioning systems. For example, using the OpenSSL CLI: - `openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>&/dev/null | openssl dgst -sha256 -hex` + `openssl x509 -pubkey -in /etc/kubernetes/pki/ca.crt | openssl rsa -pubin -outform der 2>/dev/null | openssl dgst -sha256 -hex | sed 's/^.* //'` _Skipping this flag is allowed in Kubernetes 1.8, but makes certain spoofing attacks possible._ See the [security model](#security-model) for details.