Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chectl: add a command to export CA for already deployed Che #16278

Closed
sleshchenko opened this issue Mar 6, 2020 · 2 comments
Closed

chectl: add a command to export CA for already deployed Che #16278

sleshchenko opened this issue Mar 6, 2020 · 2 comments
Assignees
@mmorhun
Labels
area/chectl Issues related to chectl, the CLI of Che kind/task Internal things, technical debt, and to-do tasks to be performed. severity/P1 Has a major impact to usage or development of the system.
Milestone
7.13

Comments

@sleshchenko
Copy link
Member

Is your task related to a problem? Please describe.

For some reason, users may lose CA created by chectl during deploying.
It would be cool if chectl provide some command to extract CA for already deployed Che.
Then it would be a good option to use we could recommend users on Dashboard side, when browser is not configured properly.
@sleshchenko sleshchenko added kind/task Internal things, technical debt, and to-do tasks to be performed. area/chectl Issues related to chectl, the CLI of Che team/deploy labels Mar 6, 2020
@che-bot che-bot added the status/need-triage An issue that needs to be prioritized by the curator responsible for the triage. See https://github. label Mar 6, 2020
@tolusha tolusha added severity/P1 Has a major impact to usage or development of the system. and removed status/need-triage An issue that needs to be prioritized by the curator responsible for the triage. See https://github. labels Mar 6, 2020
@mmorhun mmorhun mentioned this issue Apr 6, 2020
Closed
@mmorhun mmorhun self-assigned this Apr 6, 2020
@tolusha tolusha added this to the Backlog - Deploy milestone Apr 15, 2020
@tolusha tolusha mentioned this issue Apr 16, 2020
Closed
50 tasks
@mmorhun
Copy link
Contributor

mmorhun commented Apr 23, 2020

The most general way to retrieve certificate from the server is to directly query the endpoint (in trusted network). But unfortunately we cannot use such approach, because server doesn't send root certificate in the response chain, see this thread in openssl-user mailing list.

@mmorhun mmorhun mentioned this issue Apr 24, 2020
Merged
@mmorhun
Copy link
Contributor

mmorhun commented Apr 27, 2020

Done. Now it is possible to retrieve Che self-signed certificate by using command:

chectl cacert:export --platform=<platform>

@mmorhun mmorhun closed this as completed Apr 27, 2020
@tolusha tolusha modified the milestones: Backlog - Deploy, 7.13 Apr 27, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@mmorhun mmorhun

Labels
area/chectl Issues related to chectl, the CLI of Che kind/task Internal things, technical debt, and to-do tasks to be performed. severity/P1 Has a major impact to usage or development of the system.
Projects
None yet
Milestone
7.13
Development

No branches or pull requests
4 participants
@tolusha @sleshchenko @mmorhun @che-bot