mirror of
https://github.com/rancher/rancher-docs.git
synced 2026-11-01 14:43:06 +00:00
39 lines
1.7 KiB
HTML
39 lines
1.7 KiB
HTML
<h3>How do I know if my certificates are in PEM format?</h3>
|
|
|
|
<p>You can recognize the PEM format by:</p>
|
|
<p><strong>Starting with:</strong> <code>-----BEGIN CERTIFICATE-----</code></p>
|
|
<p><strong>Ending with:</strong> <code>-----END CERTIFICATE-----</code></p>
|
|
<p><strong>Example of a PEM certificate</strong></p>
|
|
|
|
<pre style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4">
|
|
----BEGIN CERTIFICATE-----
|
|
MIIGVDCCBDygAwIBAgIJAMiIrEm29kRLMA0GCSqGSIb3DQEBCwUAMHkxCzAJBgNV
|
|
... more lines
|
|
VWQqljhfacYPgp8KJUJENQ9h5hZ2nSCrI+W00Jcw4QcEdCI8HL5wmg==
|
|
-----END CERTIFICATE-----
|
|
</pre>
|
|
|
|
<h3>What is the order of certificates in case I want to add my intermediate(s)?</h3>
|
|
|
|
<p>The order of adding certificates is as follows:</p>
|
|
|
|
<pre style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4">
|
|
-----BEGIN CERTIFICATE-----
|
|
(Your certificate)
|
|
-----END CERTIFICATE-----
|
|
-----BEGIN CERTIFICATE-----
|
|
(Your intermediate certificate)
|
|
-----END CERTIFICATE-----
|
|
</pre>
|
|
|
|
<h3>How do I validate my certificate chain?</h3>
|
|
|
|
<p>You can validate the certificate chain by using the <code>openssl</code> binary. If the output of the command (see the command example below) ends with <code>Verify return code: 0 (ok)</code>, your certificate chain is valid. The <code>ca.pem</code> file should be the same as you supplied to the <code>rancher/rancher</code> container. When using a certificate signed by a well known Certificate Authority, you can omit the <code>-CAfile</code> parameter.</p>
|
|
|
|
<p><strong>Command</strong></p>
|
|
<pre style="color:#f8f8f2;background-color:#272822;-moz-tab-size:4;-o-tab-size:4;tab-size:4">
|
|
openssl s_client -CAfile ca.pem -connect rancher.yourdomain.com:443
|
|
...
|
|
Verify return code: 0 (ok)
|
|
</pre>
|