Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update documentation regarding addition of SSL certificates. #207

Open
konobi opened this issue Jul 17, 2016 · 0 comments
Open

Update documentation regarding addition of SSL certificates. #207

konobi opened this issue Jul 17, 2016 · 0 comments

Comments

@konobi
Copy link

konobi commented Jul 17, 2016

We just debugged and fixed an issue in #smartos regarding adding real SSL certificates for a docker install, etc.

The documentation needs to be updated to take account of changes in the SSL ecosystem. Certificates are now being signed with extra additional intermediates to allow for more inter-CA trust, validation and revocation. We've seen this lots lately in relation to changing of certificates to support SHA256 and HPKP; Which are now part of PCI compliance testing.

The change is small, thankfully. Instead of using the certificate from the SSL vendor directly, the combination of the certificate and the ca bundle need to be concatenated together in the correct order and then the resultant chained certificate file used by the server as the certificate.

See the following for details: http://nginx.org/en/docs/http/configuring_https_servers.html#chains

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant