Hi Andy, Thanks for letting us know about this doc change. It looks like this software bug fix requires an update to this user document: https://docs.starlingx.io/configuration/cert_config.html, in the Local Docker registry section. [source file = configuration/cert_config.rst] Can you please open a review against this guide in the docs repo and add the line "Related-Bug: 1883300" in your commit message? That will help us keep track of everything, since the original SW bug is already Fixed. Please let me know if you have any questions or issues. thanks again, Mary Camp PTIGlobal Technical Writer | maryx.camp@intel.com<mailto:maryx.camp@intel.com> From: Ning, Antai (Andy) <Andy.Ning@windriver.com> Sent: Wednesday, August 5, 2020 11:20 AM To: starlingx-discuss@lists.starlingx.io Cc: Khalil, Ghada <Ghada.Khalil@windriver.com>; Waines, Greg <Greg.Waines@windriver.com>; Balaraj, Juanita <Juanita.Balaraj@windriver.com>; Camp, MaryX <maryx.camp@intel.com> Subject: [Starlingx-discuss] stx docs input: 1883300 Hi All: Here is the doc info for: Support for ICA signed ssl, docker_registry certifcate installation: (https://bugs.launchpad.net/starlingx/+bug/1883300) The fix is delivered as: https://review.opendev.org/#/c/740960/ https://review.opendev.org/#/c/740958/ With this bug fix released, ICA (intermediate CA) signed ssl, docker_registry certificate can be installed by the following command respectively: system certificate-install -m ssl <ssl cert pem file> system certificate-install -m docker_registry <docker registry cert pem file> An ICA signed ssl, docker_registry certificate contains the final server certificate, and the intermediate CA certificates signing the final server certificate. In the pem file passed to system certificate install command, the certificates should be ordered such that each of the certificate is signed by the succeeding one, with the final server certificate as the very first in the list. Please let me know if you have any questions. Thanks, Andy