Chapter 2. Adding trusted certificate authorities

Procedure

1. Download the ca-setup.sh script.

   Note
   • If you are doing a new installation, you can find the ca-setup.sh script in the scripts directory at central-bundle/central/scripts/ca-setup.sh.
   • You must run the ca-setup.sh script in the same terminal from which you logged into your OpenShift Container Platform cluster.

2. Make the ca-setup.sh script executable:

   $ chmod +x ca-setup.sh

   Copy to Clipboard Toggle word wrap

3. To add:

   1. A single certificate, use the -f (file) option:

      $ ./ca-setup.sh -f <certificate>

      Copy to Clipboard Toggle word wrap
      Note
      • You must use a PEM-encoded certificate file (with any extension).
      • You can also use the -u (update) option along with the -f option to update any previously added certificate.

   2. Multiple certificates at once, move all certificates in a directory, and then use the -d (directory) option:

      $ ./ca-setup.sh -d <directory_name>

      Copy to Clipboard Toggle word wrap
      Note
      • You must use PEM-encoded certificate files with a .crt or .pem extension.
      • Each file must only contain a single certificate.
      • You can also use the -u (update) option along with the -d option to update any previously added certificates.