search

ReinerNippes / nextcloud_on_docker

Run Nextcloud in Docker Container on various Linux Hosts
MIT License
203 stars 48 forks source link

Question: Location of root certificate that signs private cert? #78

Open edremington opened 3 years ago

edremington commented 3 years ago

Where can I find the root cert that the self-signed ssl certs are signed with?

-or- is there a way to provide a private root cert to sign the self signed ssl certs?

Use case: I am running in a private behind a firewall, I would like to install the root cert that signs the self-signed ssl certs so that I can avoid the annoying warnings; Where can I go to get the root cert?

Also, IF I wanted to provide a root certificate that would be used to sign the self signed certs, is this possible?

azonictechnophile commented 3 years ago

It looks like traefik stores its certs in /certs. You can add that volume and then add your own self signed cert.

Below is the reference to do this: https://stackoverflow.com/questions/56639602/traefik-and-self-signed-ssl

azonictechnophile commented 3 years ago

That reference was out of date. To add your own certs now you need to edit the dynamic.yaml file and insert the following:

tls: stores: default: defaultCertificate: certFile: path/to/cert.crt keyFile: path/to/cert.key

The yaml format is not showing in the comment. You can view the instructions here for proper format: https://doc.traefik.io/traefik/https/tls/