istio.io
istio.io copied to clipboard
Update Generate client and server certificates and keys
Hello!
Documentation to update: https://istio.io/latest/docs/tasks/traffic-management/ingress/secure-ingress/#generate-client-and-server-certificates-and-keys
Why? The self-signed certificate generated is not recognised by Chrome. This is since the Chrome 58 update.
I successfully tested the certificate with Safari v15.4
on macOS Monterey v12.3.1
.
Error
Subject Alternative Name Missing The certificate for this site does not contain a Subject Alternative Name extension containing a domain name or IP address. Certificate Error There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAME_INVALID).
Suggestion
- Include a notice that this certificate is for testing purposes and might not be recognised by all browsers.
- Include the steps necessary to create a self-signed certificate that is recognised by Chrome. Example here