istio.io icon indicating copy to clipboard operation
istio.io copied to clipboard

Update Generate client and server certificates and keys

Open rafaelmnatali opened this issue 2 years ago • 0 comments

Hello!

Documentation to update: https://istio.io/latest/docs/tasks/traffic-management/ingress/secure-ingress/#generate-client-and-server-certificates-and-keys

Why? The self-signed certificate generated is not recognised by Chrome. This is since the Chrome 58 update.

I successfully tested the certificate with Safari v15.4 on macOS Monterey v12.3.1.

Error

Subject Alternative Name Missing The certificate for this site does not contain a Subject Alternative Name extension containing a domain name or IP address. Certificate Error There are issues with the site's certificate chain (net::ERR_CERT_COMMON_NAME_INVALID).

Suggestion

  1. Include a notice that this certificate is for testing purposes and might not be recognised by all browsers.
  2. Include the steps necessary to create a self-signed certificate that is recognised by Chrome. Example here

rafaelmnatali avatar Aug 03 '22 08:08 rafaelmnatali