[Starlingx-discuss] stx docs input: 1883300

Camp, MaryX maryx.camp at intel.com
Wed Aug 5 21:04:11 UTC 2020


Hi Andy,
Thanks for letting us know about this doc change. It looks like this software bug fix requires an update to this user document:
https://docs.starlingx.io/configuration/cert_config.html, in the Local Docker registry section.  [source file = configuration/cert_config.rst]

Can you please open a review against this guide in the docs repo and add the line "Related-Bug: 1883300" in your commit message? That will help us keep track of everything, since the original SW bug is already Fixed.
Please let me know if you have any questions or issues.

thanks again,
Mary Camp
PTIGlobal Technical Writer | maryx.camp at intel.com<mailto:maryx.camp at intel.com>

From: Ning, Antai (Andy) <Andy.Ning at windriver.com>
Sent: Wednesday, August 5, 2020 11:20 AM
To: starlingx-discuss at lists.starlingx.io
Cc: Khalil, Ghada <Ghada.Khalil at windriver.com>; Waines, Greg <Greg.Waines at windriver.com>; Balaraj, Juanita <Juanita.Balaraj at windriver.com>; Camp, MaryX <maryx.camp at intel.com>
Subject: [Starlingx-discuss] stx docs input: 1883300

Hi All:

Here is the doc info for:
Support for ICA signed ssl, docker_registry certifcate installation:
(https://bugs.launchpad.net/starlingx/+bug/1883300)

The fix is delivered as:
https://review.opendev.org/#/c/740960/
https://review.opendev.org/#/c/740958/

With this bug fix released, ICA (intermediate CA) signed ssl, docker_registry
certificate can be installed by the following command respectively:

system certificate-install -m ssl <ssl cert pem file>
system certificate-install -m docker_registry <docker registry cert pem file>

An ICA signed ssl, docker_registry certificate contains the final server
certificate, and the intermediate CA certificates signing the final server
certificate.

In the pem file passed to system certificate install command, the certificates
should be ordered such that each of the certificate is signed by the succeeding
one, with the final server certificate as the very first in the list.

Please let me know if you have any questions.

Thanks,
Andy
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.starlingx.io/pipermail/starlingx-discuss/attachments/20200805/b26f9ed8/attachment.html>


More information about the Starlingx-discuss mailing list