Portainer
/
portainer-docs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Added note regarding full chains in SSL certificates

pull/204/head
James Carppe 2021-09-03 10:56:01 +12:00
parent d516866114
commit 74bfbdf4b7
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
docs/v2.0-be/deploy/ssl.md
View File

@ -6,6 +6,9 @@ By default, Portainer’s web interface and API is exposed over HTTP. This is no
To do so, you can use the <code>--ssl</code>, <code>--sslcert</code> and <code>--sslkey</code> flags. Portainer expects certificates in PEM format.
!!! note
When using your own externally-issued certificate, ensure you include the full certificate chain (including any intermediate certificates) in the file you provide via `--sslcert`. Without this you may face certificate validation issues. Your certificate chain can be obtained from your certificate issuer or via the [What's My Chain Cert?](https://whatsmychaincert.com/) website.
To generate and use a self-signed certificate you can use the following command on your server:
<pre><code>openssl req -new -newkey rsa:4096 -days 3650 -nodes -x509 -keyout ~/local-certs/portainer.key -out ~/local-certs/portainer.crt</code></pre>

3
docs/v2.0/deploy/ssl.md
View File

@ -6,6 +6,9 @@ By default, Portainer’s web interface and API is exposed over HTTP. This is no
To do so, you can use the <code>--ssl</code>, <code>--sslcert</code> and <code>--sslkey</code> flags. Portainer expects certificates in PEM format.
!!! note
When using your own externally-issued certificate, ensure you include the full certificate chain (including any intermediate certificates) in the file you provide via `--sslcert`. Without this you may face certificate validation issues. Your certificate chain can be obtained from your certificate issuer or via the [What's My Chain Cert?](https://whatsmychaincert.com/) website.
To generate and use a self-signed certificate you can use the following command on your server:
<pre><code>openssl req -new -newkey rsa:4096 -days 3650 -nodes -x509 -keyout ~/local-certs/portainer.key -out ~/local-certs/portainer.crt</code></pre>