public/rancher-docs
1
0
Fork 0
mirror of https://github.com/rancher/rancher-docs.git synced 2026-09-25 12:38:05 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fix SSL bugs around self signed and default certificate

Browse Source
This commit is contained in:
Sebastiaan van Steenis
2018-05-30 14:18:49 -07:00
committed by Mark Bishop
parent 47524d304b
commit bff02819a4
2 changed files with 8 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/rancher/v2.x/en/installation/single-node-install-external-lb/_index.md
-1
View File
@@ -81,7 +81,6 @@ docker run -d --restart=unless-stopped \
If your cluster is public facing, it's best to use a certificate signed by a recognized CA.
>**Prerequisites:**
>Create a self-signed certificate.
>
>- The certificate files must be in [PEM format](#ssl-faq-troubleshooting).
>- The certificate files must be in base64.
content/rancher/v2.x/en/installation/single-node-install/_index.md
+8 -1
View File
@@ -105,7 +105,6 @@ If you're publishing your app publically, you should ideally be using a certific
**Before You Start:**
>**Prerequisites:**
>Create a self-signed certificate.
>
>- The certificate files must be in [PEM format](#ssl-faq-troubleshooting).
>- The certificate files must be in base64.
@@ -123,6 +122,14 @@ docker run -d --restart=unless-stopped \
rancher/rancher:latest
```
By default, Rancher automatically generates self-signed certificates for itself after installation. However, since you've provided your own certificates, you must disable the certificates that Rancher generated for itself.
**To Remove the Default Certificates:**
1. Log into Rancher.
2. Select **Settings** > **cacerts**.
3. Choose `Edit` and remove the contents. Then click `Save`.
### Option D-Let's Encrypt Certificate
Rancher supports Let's Encrypt certificates. Let's Encrypt uses an http-01 challenge to verify that you have control over your domain. You can confirm that you control the domain by pointing the hostname that you want to use for Rancher access (for example, `rancher.mydomain.com`) to the IP of the machine it is running on. You can bind the hostname to the IP address by creating an A record in DNS.