Fixes for CA deployment guide

Fix and improve instructions related to csr.hosts in the CA config and deployment guide. Also update deployment guide to clarify TLS certs and bootstrap identity for TLS CA server and organization CA server. Signed-off-by: David Enyeart <enyeart@us.ibm.com>
hyperledger · Mar 18, 2022 · 4c5d2ef · 4c5d2ef
1 parent fc42d91
commit 4c5d2ef
Show file tree

Hide file tree

Showing 3 changed files with 66 additions and 65 deletions.
diff --git a/cmd/fabric-ca-server/config.go b/cmd/fabric-ca-server/config.go
@@ -335,6 +335,8 @@ signing:
 #  3) pathlength == 0 means a limit of 0 is requested;
 #     this is the default for an intermediate CA, which means it can not issue
 #     CA certificates though it can still issue end entity certificates.
+#  The "hosts" field will be used to specify Subject Alternative Names
+#  if the server creates a self-signed TLS certificate.
 ###########################################################################
 csr:
    cn: <<<COMMONNAME>>>