search

cockroachdb / docs

CockroachDB user documentation
https://cockroachlabs.com/docs
Creative Commons Attribution 4.0 International
188 stars 457 forks source link

Add clarification to add any intermediate certs to node.crt, client.node.crt, ui.crt #7676

Open sheaffej opened 4 years ago

sheaffej commented 4 years ago

John Sheaffer (sheaffej) commented:

Some organizations use an intermediate certificate for signing server and client certs, where this intermediate certificate is signed by the root CA. In this case, the intermediate cert should be included in the node.crt, client.node.crt, and/or ui.crt. The root CA cert should be still contained in the ca.crt file.

Example: ca.crt: contains the root CA certificate node.crt: contains the server's "node" cert, and the intermediate signing certificate client.node.crt: contains the server's "client" cert, and the intermediate signing certificate ui.crt: contains the server's "ui" cert, and the intermediate signing certificate

Potential spot in the documentation to add this clarification is: https://www.cockroachlabs.com/docs/v20.1/create-security-certificates-custom-ca.html

Jira Issue: DOC-575

jseldess commented 4 years ago

Passing to @Amruta-Ranade and @thtruo for triage and prioritization.