Hi Andy,
Thanks for letting us know about this doc change. It looks like this software bug fix requires an update to this user document:
https://docs.starlingx.io/configuration/cert_config.html, in the Local Docker registry section. [source file = configuration/cert_config.rst]
Can you please open a review against this guide in the docs repo and add the line “Related-Bug: 1883300” in your commit message? That will help us keep track of everything, since the original SW bug is already Fixed.
Please let me know if you have any questions or issues.
From: Ning, Antai (Andy) <Andy.Ning@windriver.com>
Sent: Wednesday, August 5, 2020 11:20 AM
To: starlingx-discuss@lists.starlingx.io
Cc: Khalil, Ghada <Ghada.Khalil@windriver.com>; Waines, Greg <Greg.Waines@windriver.com>; Balaraj, Juanita <Juanita.Balaraj@windriver.com>; Camp, MaryX <maryx.camp@intel.com>
Subject: [Starlingx-discuss] stx docs input: 1883300
Hi All:
Here is the doc info for:
Support for ICA signed ssl, docker_registry certifcate installation:
The fix is delivered as:
With this bug fix released, ICA (intermediate CA) signed ssl, docker_registry
certificate can be installed by the following command respectively:
system certificate-install -m ssl <ssl cert pem file>
system certificate-install -m docker_registry <docker registry cert pem file>
An ICA signed ssl, docker_registry certificate contains the final server
certificate, and the intermediate CA certificates signing the final server
certificate.
In the pem file passed to system certificate install command, the certificates
should be ordered such that each of the certificate is signed by the succeeding
one, with the final server certificate as the very first in the list.
Please let me know if you have any questions.
Thanks,
Andy