openstack
/
tripleo-docs
Code Issues Proposed changes

Merge "Add note about trusting the undercloud's CA certificate"

This commit is contained in:
Jenkins 2017-08-31 20:42:06 +00:00 committed by Gerrit Code Review
parent 20b09de6ff 183c218a62
commit fa4b14adfd
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
doc/source/install/advanced_deployment/ssl.rst
View File

@ -95,6 +95,11 @@ certificate store::
sudo cp cacert.pem /etc/pki/ca-trust/source/anchors/
sudo update-ca-trust extract
.. note:: If you're using a self-signed or autogenerated certificate for the
undercloud, the overcloud nodes will need to trust it. So the
contents of the certificate need to be set in the CAMap as described
in ":ref:`ca-trust`" section.
Overcloud SSL
-------------
@ -294,6 +299,8 @@ Self-signed DNS-based certificate::
.. note:: It is also possible to get the public certificate from a CA. See
:doc:`../advanced_deployment/tls_everywhere`
.. _ca-trust:
Getting the overcloud to trust CAs
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~