summaryrefslogtreecommitdiffstats
path: root/docs/sections/tls_enablement.rst
diff options
context:
space:
mode:
authorVijay Venkatesh Kumar <vv770d@att.com>2020-12-01 16:19:44 +0000
committerGerrit Code Review <gerrit@onap.org>2020-12-01 16:19:44 +0000
commit0b81f59e37afdce39efa86aaf33ca020e20cd5fd (patch)
tree29fc58618a557137c7fef0061ec8273623897226 /docs/sections/tls_enablement.rst
parent7c5e6407174037185f74debe316b7a9fa114354d (diff)
parente0d2ada42209f1327fd1b95279fae5662aff23e1 (diff)
Merge "Update external certs docs to use comma as SANs delimiter"
Diffstat (limited to 'docs/sections/tls_enablement.rst')
-rw-r--r--docs/sections/tls_enablement.rst4
1 files changed, 2 insertions, 2 deletions
diff --git a/docs/sections/tls_enablement.rst b/docs/sections/tls_enablement.rst
index 85ba13d0..4a049039 100644
--- a/docs/sections/tls_enablement.rst
+++ b/docs/sections/tls_enablement.rst
@@ -176,7 +176,7 @@ From k8splugin 3.4.1 when external TLS is enabled (use_external_tls=true), keyst
* A string (``output_type``) that indicates certificate output type.
* A dictionary (``external_certificate_parameters``) with two elements:
* A string (``common_name``) that indicates common name which should be present in certificate. Specific for every blueprint (e.g. dcae-ves-collector for VES).
- * A string (``sans``) that indicates list of Subject Alternative Names (SANs) which should be present in certificate. Delimiter - : Should contain common_name value and other FQDNs under which given component is accessible.
+ * A string (``sans``) that indicates list of Subject Alternative Names (SANs) which should be present in certificate. Delimiter - , Should contain common_name value and other FQDNs under which given component is accessible.
As a final step of the plugin the generated CMPv2 truststore entries will be appended to AAF CA truststore (see certificate artifacts below).
@@ -191,7 +191,7 @@ From k8splugin 3.4.1 when external TLS is enabled (use_external_tls=true), keyst
cert_type: "P12"
external_certificate_parameters:
common_name: "simpledemo.onap.org"
- sans: "simpledemo.onap.org;ves.simpledemo.onap.org;ves.onap.org"
+ sans: "simpledemo.onap.org,ves.simpledemo.onap.org,ves.onap.org"
For this example the certificates are mounted into ``/opt/app/dcae-certificate/external`` directory within the container.