From 90fe42a2ffbad9a9479224382cdbe4cdcb8b3f9d Mon Sep 17 00:00:00 2001 From: Qiming Teng Date: Fri, 3 Nov 2017 09:31:31 +0800 Subject: [PATCH] Fix openssl command for generating apiserver cert --- docs/concepts/cluster-administration/certificates.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/docs/concepts/cluster-administration/certificates.md b/docs/concepts/cluster-administration/certificates.md index 083e23ea89..49ac24d534 100644 --- a/docs/concepts/cluster-administration/certificates.md +++ b/docs/concepts/cluster-administration/certificates.md @@ -126,7 +126,9 @@ Finally, add the following parameters into API server start parameters: openssl req -new -key server.key -out server.csr -config csr.conf 1. Generate the server certificate using the ca.key, ca.crt and server.csr: - openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt -days 10000 + openssl x509 -req -in server.csr -CA ca.crt -CAkey ca.key \ + -CAcreateserial -out server.crt -days 10000 \ + -extensions v3_ext -extfile csr.conf 1. View the certificate: openssl x509 -noout -text -in ./server.crt