Bug 1045577 - 6.8.6.1. Creating a Matching Certificate (OSE 1.2 docs)
Summary: 6.8.6.1. Creating a Matching Certificate (OSE 1.2 docs)
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Container Platform
Classification: Red Hat
Component: Documentation
Version: 1.2.1
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
: ---
Assignee: brice
QA Contact: ecs-bugs
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2013-12-20 18:34 UTC by Luke Meyer
Modified: 2015-07-20 00:21 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Build Name: 22146, Deployment Guide-1-1.2 Build Date: 26-11-2013 14:18:45 Topic ID: 20615-477529 [Specified]
Last Closed: 2014-01-08 23:43:11 UTC
Target Upstream Version:


Attachments (Terms of Use)

Description Luke Meyer 2013-12-20 18:34:53 UTC
Title: Creating a Matching Certificate
https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/1/html-single/Deployment_Guide/index.html#sect-SSL_Certificates

Describe the issue:
The openssl command here is outright missing a line and will not work. Also there are some other adjustments needed.

Suggestions for improvement:
It should read like the OSE 2.0 docs at https://access.redhat.com/site/documentation/en-US/OpenShift_Enterprise/2/html-single/Deployment_Guide/index.html#sect-SSL_Certificates

Comment 1 Luke Meyer 2013-12-20 18:44:56 UTC
Actually this and the 2.0 equivalent should read the same, but without the leading > marks:

---
# cat << EOF | openssl req -new -rand /dev/urandom \
  -newkey rsa:2048 -nodes -keyout /etc/pki/tls/private/localhost.key \
  -x509 -days 3650 \
  -out /etc/pki/tls/certs/localhost.crt 2> /dev/null
XX
SomeState
SomeCity
SomeOrganization
SomeOrganizationalUnit
*.$domain
root@$domain
EOF
---

Enables wholesale cut and paste. Granted, they may not want to cut and paste this as-is, but at least it will give them a cert with the right domain if they do.

Comment 3 brice 2013-12-23 00:53:39 UTC
Edited out the leading > marks, and made the topic for 2.0 and 1.2 match. Made sure the command matched the one in the initial comment above.

This all seems straight-forward. Unless you have anything else, Luke, I'm going to put this BZ onto QA.

Comment 5 Luke Meyer 2013-12-23 13:30:36 UTC
Looks good, thanks!


Note You need to log in before you can comment on or make changes to this bug.