Merge pull request #2235 from robwdux/patch-1

update ca tutorial to one more recent and relevant
This commit is contained in:
James Phillips 2016-08-17 18:00:03 -07:00 committed by GitHub
commit 861efcc8c8
1 changed files with 1 additions and 1 deletions

View File

@ -59,7 +59,7 @@ Consul supports using TLS to verify the authenticity of servers and clients. To
Consul requires that all clients and servers have key pairs that are generated by a single
Certificate Authority. This can be a private CA, used only internally. The
CA then signs keys for each of the agents, as in
[this tutorial on generating both a CA and signing keys](https://langui.sh/2009/01/18/openssl-self-signed-ca/)
[this tutorial on generating both a CA and signing keys](http://russellsimpkins.blogspot.com/2015/10/consul-adding-tls-using-self-signed.html)
using OpenSSL. Note: client certificates must have
[Extended Key Usage](https://www.openssl.org/docs/apps/x509v3_config.html#extended_key_usage_) enabled
for client and server authentication.