Skip to content

Commit

Permalink
Added a note in the documentation
Browse files Browse the repository at this point in the history
Signed-off-by: Rensy Thomas <[email protected]>
  • Loading branch information
rensycthomas committed Dec 23, 2024
1 parent 9245eeb commit deaa30e
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -41,6 +41,7 @@ To understand how to generate certificates, refer to the [Certificate Generation
- If you want to use certificates stored in another node of the HA cluster, you can provide the remote path to the certificates using the `<IP_ADDRESS_OF_NODE>:<ABSOLUTE_PATH_TO_THE_CERT_FILE>` format instead of the local path.
- `--wait-timeout` This flag sets the operation timeout duration (in seconds) for each individual node during the certificate rotation process.
- Certificate rotation should be done in down-time window as service will restart.
- CN (Common Name) should be the same for all certificates in Opensearch nodes.
{{< /note >}}

### Rotate Cluster Certificates
Expand Down
3 changes: 2 additions & 1 deletion components/docs-chef-io/content/automate/ha_cert_selfsign.md
Original file line number Diff line number Diff line change
Expand Up @@ -82,7 +82,8 @@ You can create a self-signed key and certificate pair with the **OpenSSL** utili

{{< note >}}

To create self-signed certificate for FQDN make sure to provide proper DNS and CN value. The DNS in Subject Alternative Name should match with the CN (Comman Name)
- To create self-signed certificate for FQDN make sure to provide proper DNS and CN value. The DNS in Subject Alternative Name should match with the CN (Common Name).
- CN (Common Name) should be the same for all certificates in Opensearch nodes.

{{< /note >}}

Expand Down

0 comments on commit deaa30e

Please sign in to comment.