From 16b75a646e732fb160a7514cab5e1251c363618f Mon Sep 17 00:00:00 2001 From: dnoland1 Date: Tue, 18 Dec 2018 22:33:29 -0800 Subject: [PATCH] Update _index.md Fixed various grammar mistakes --- .../en/admin-settings/custom-ca-root-certificate/_index.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/content/rancher/v2.x/en/admin-settings/custom-ca-root-certificate/_index.md b/content/rancher/v2.x/en/admin-settings/custom-ca-root-certificate/_index.md index 4fc19a6d76c..e56364d1691 100644 --- a/content/rancher/v2.x/en/admin-settings/custom-ca-root-certificate/_index.md +++ b/content/rancher/v2.x/en/admin-settings/custom-ca-root-certificate/_index.md @@ -4,9 +4,9 @@ weight: 252 aliases: - /rancher/v2.x/en/installation/custom-ca-root-certificate/ --- -If you're using Rancher in a internal production environment where you aren't exposing apps publicly, use a certificate from a private certificate authority (CA). +If you're using Rancher in an internal production environment where you aren't exposing apps publicly, use a certificate from a private certificate authority (CA). -Services that Rancher needs to access are sometimes configured with a certificate from an custom/internal CA root, also known as self signed certificate. If the presented certificate from the service cannot be validated by Rancher, the following error displays: `x509: certificate signed by unknown authority`. +Services that Rancher needs to access are sometimes configured with a certificate from a custom/internal CA root, also known as self signed certificate. If the presented certificate from the service cannot be validated by Rancher, the following error displays: `x509: certificate signed by unknown authority`. To validate the certificate, the CA root certificates need to be added to Rancher. As Rancher is written in Go, we can use the environment variable `SSL_CERT_DIR` to point to the directory where the CA root certificates are located in the container. The CA root certificates directory can be mounted using the Docker volume option (`-v host-source-directory:container-destination-directory`) when starting the Rancher container. @@ -16,7 +16,7 @@ Examples of services that Rancher can access: * Authentication providers * Accessing hosting/cloud API when using Node Drivers -Use the the command example to start a Rancher container with you private CA certificates mounted. +Use the command example to start a Rancher container with your private CA certificates mounted. - The volume option (`-v`) should specify the host directory containing the CA root certificates. - The `e` flag in combination with `SSL_CERT_DIR` declares an environment variable that specifies the mounted CA root certificates directory location inside the container.