Differences

This shows you the differences between two versions of the page.

--- services:docker-mirror [2021/01/20 15:48] – [Setup Commands] djgalloway
+++ services:docker-mirror [2021/01/20 15:50] (current) – [Renewing the SSL certiciate] djgalloway
@@ Line 45: / Line 45: @@
 ===== Admin Tasks =====
 ==== Renewing the SSL certiciate ====
-The first time I created the cert, I accidentally left the date out so the cert was only good for a month.  The second cert is good for 5 years.
+The first time I created the cert, I accidentally left the date out so the cert was only good for a month.  The second cert is good for 10 years.
-  - ''%%root@docker-mirror:~# openssl req  -newkey rsa:4096 -nodes -sha256 -keyout /lrc/certs/domain.key -x509 -days 3650 -out /lrc/certs/domain.crt%%''
+  - ''%%root@docker-mirror:~# openssl req  -newkey rsa:4096 -nodes -sha256 -keyout /lrc/certs/domain.key -x509 -days 3650 -addext "subjectAltName = DNS:docker-mirror.front.sepia.ceph.com" -out /lrc/certs/domain.crt%%''
   - Copy the contents of ''/lrc/certs/domain.crt'' and update ''container_mirror_cert'' in https://github.com/ceph/ceph-sepia-secrets/blob/master/ansible/inventory/group_vars/all.yml
   - Run ''ansible-playbook container-host.yml'' against the appropriate hosts.