luxolus/open-nomad
2
0
Fork 0
Code Issues 1 Pull requests Packages Releases Wiki Activity

Use list instead of table

Browse source
This commit is contained in:
Seth Vargo 2016-11-17 13:05:55 -05:00
parent 2d432cc63a
commit e79e67b58b
No known key found for this signature in database
GPG key ID: 905A90C2949E8787
1 changed files with 14 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
website/source/docs/agent/encryption.html.md
View file

@ -102,13 +102,20 @@ $ cfssl gencert -ca ca.pem -ca-key ca-key.pem nomad-csr.json | cfssljson -bare n
You've now successfully generated self-signed certificates! You should see the
following files:
| File | Description | Usage |
|-----------------|------------------------------|---------------------------|
| `ca.pem` | CA certificate | `ca_file` setting |
| `ca-key.pem` | CA private key | Signing CSRs |
| `nomad.pem` | Nomad cert for global region | `cert_file` setting |
| `nomad-key.pem` | Nomad key for foo region | `key_file` setting |
| `*.csr` | Certificate Signing Requests | Generating certs (temporary) |
- `ca.pem` - the CA certificate. This corresponds to the Nomad `ca_file`
parameter in the Nomad [`tls` stanza][tls].
- `ca-key.pem` - the CA private key. This is used to sign CSRs and should
**not** be included in the Nomad [`tls` stanza][tls].
- `nomad.pem` - the Nomad certificate for the region. This corresponds to the
`cert_file` parameter in the Nomad [`tls` stanza][tls].
- `nomad-key.pem` - the Nomad private key. This corresponds to the `key_file`
parameter in the Nomad [`tls` stanza][tls].
- `*.csr` - the certificate signing request. This is temporary for generating
certificates and should **not** be included in the Nomad [`tls` stanza][tls].
In your Nomad configuration add the `tls` stanza: