generate_cert
generate_cert copied to clipboard
Swarm Compatibility
@SvenDowideit I have no problem using this to connect my client to a remote daemon but connecting the swarm master to swarm nodes does not seem to work.
Swarm Master:
time="2015-05-07T13:48:42Z" level=error msg="Get https://192.168.1.71:2376/v1.15/info: remote error: handshake failure"
Swarm node:
May 07 13:43:58 localhost docker[1057]: 2015/05/07 13:43:58 http: TLS handshake error from 192.168.1.20:60964: tls: client's certificate's extended key usage doesn't permit it to be used for client authentication
From offical docs:
Swarm supports TLS authentication between the CLI and Swarm but also between Swarm and the Docker nodes. However, all the Docker daemon certificates and client certificates must be signed using the same CA-certificate.
Swarm certificates must be generated with extendedKeyUsage = clientAuth,serverAuth