<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Hi Mary,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I updated configuration/cert_config.rst as you instructed in review:</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<a href="https://review.opendev.org/#/c/745168/" id="LPlnk906579">https://review.opendev.org/#/c/745168/</a></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
I don't know how to build it into html though.</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Thanks,</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
Andy<br>
</div>
<div id="appendonsend"></div>
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Camp, MaryX <maryx.camp@intel.com><br>
<b>Sent:</b> Wednesday, August 5, 2020 5:04 PM<br>
<b>To:</b> Ning, Antai (Andy) <Andy.Ning@windriver.com>; starlingx-discuss@lists.starlingx.io <starlingx-discuss@lists.starlingx.io><br>
<b>Cc:</b> Khalil, Ghada <Ghada.Khalil@windriver.com>; Waines, Greg <Greg.Waines@windriver.com>; Balaraj, Juanita <Juanita.Balaraj@windriver.com><br>
<b>Subject:</b> RE: [Starlingx-discuss] stx docs input: 1883300</font>
<div> </div>
</div>
<style>
<!--
@font-face
{font-family:"Cambria Math"}
@font-face
{font-family:Calibri}
p.x_MsoNormal, li.x_MsoNormal, div.x_MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif}
a:link, span.x_MsoHyperlink
{color:#0563C1;
text-decoration:underline}
span.x_EmailStyle20
{font-family:"Calibri",sans-serif;
color:#0071C5}
.x_MsoChpDefault
{font-size:10.0pt}
@page WordSection1
{margin:1.0in 1.0in 1.0in 1.0in}
div.x_WordSection1
{}
-->
</style>
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="x_WordSection1">
<p class="x_MsoNormal"><span style="color:#0071C5">Hi Andy,</span></p>
<p class="x_MsoNormal"><span style="color:#0071C5">Thanks for letting us know about this doc change. It looks like this software bug fix requires an update to this user document:
</span></p>
<p class="x_MsoNormal"><span style="color:#0071C5"><a href="https://docs.starlingx.io/configuration/cert_config.html">https://docs.starlingx.io/configuration/cert_config.html</a>, in the Local Docker registry section. [source file = configuration/cert_config.rst]
</span></p>
<p class="x_MsoNormal"><span style="color:#0071C5"> </span></p>
<p class="x_MsoNormal"><span style="color:#0071C5">Can you please open a review against this guide in the docs repo and add the line “Related-Bug: 1883300” in your commit message? That will help us keep track of everything, since the original SW bug is already
Fixed.</span></p>
<p class="x_MsoNormal"><span style="color:#0071C5">Please let me know if you have any questions or issues.
</span></p>
<p class="x_MsoNormal"><span style="color:#0071C5"> </span></p>
<div>
<p class="x_MsoNormal"><span style="color:#0071C5">thanks again,</span></p>
<p class="x_MsoNormal"><span style="color:#0071C5">Mary Camp</span></p>
<p class="x_MsoNormal"><span style="font-size:10.0pt; color:#0071C5">PTIGlobal Technical Writer |
<a href="mailto:maryx.camp@intel.com">maryx.camp@intel.com</a></span></p>
</div>
<p class="x_MsoNormal"><span style="color:#0071C5"> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0in 0in 0in">
<p class="x_MsoNormal"><b>From:</b> Ning, Antai (Andy) <Andy.Ning@windriver.com> <br>
<b>Sent:</b> Wednesday, August 5, 2020 11:20 AM<br>
<b>To:</b> starlingx-discuss@lists.starlingx.io<br>
<b>Cc:</b> Khalil, Ghada <Ghada.Khalil@windriver.com>; Waines, Greg <Greg.Waines@windriver.com>; Balaraj, Juanita <Juanita.Balaraj@windriver.com>; Camp, MaryX <maryx.camp@intel.com><br>
<b>Subject:</b> [Starlingx-discuss] stx docs input: 1883300</p>
</div>
</div>
<p class="x_MsoNormal"> </p>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">Hi All:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">Here is the doc info for:</span></p>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">Support for ICA signed ssl, docker_registry certifcate installation:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">(<a href="https://bugs.launchpad.net/starlingx/+bug/1883300">https://bugs.launchpad.net/starlingx/+bug/1883300</a>)</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">The fix is delivered as:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"><a href="https://review.opendev.org/#/c/740960/">https://review.opendev.org/#/c/740960/</a></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"><a href="https://review.opendev.org/#/c/740958/">https://review.opendev.org/#/c/740958/</a></span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">With this bug fix released, ICA (intermediate CA) signed ssl, docker_registry</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">certificate can be installed by the following command respectively:</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">system certificate-install -m ssl <ssl cert pem file>
</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">system certificate-install -m docker_registry <docker registry cert pem file>
</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">An ICA signed ssl, docker_registry certificate contains the final server</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">certificate, and the intermediate CA certificates signing the final server</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">certificate.</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">In the pem file passed to system certificate install command, the certificates</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">should be ordered such that each of the certificate is signed by the succeeding</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">one, with the final server certificate as the very first in the list.</span></p>
</div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"><br>
Please let me know if you have any questions.</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black"> </span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">Thanks,</span></p>
</div>
<div>
<p class="x_MsoNormal"><span style="font-size:12.0pt; color:black">Andy</span></p>
</div>
</div>
</div>
</body>
</html>