Harbor Registry and Certs

Spread the love
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  
  •  

I’m working with a Harbor registry that was set up by a third-party contractor just before my arrival. The SSL certificate from GoDaddy expired a while ago, and I got to find out about it when my coworker couldn’t pull images. Anyway, the root of my problem is how to generate a CSR with all of the right stuff to make Harbor and Docker happy. The IT manager and I did our own CSR, but we didn’t capture the x509 aspect and a few other things. Our current error is x509: certificate signed by unknown authority If you look here at step 3 under “Generate a Server Certificate,” we were missing the contents of that file. The file I generated based on those instructions is as follows. “` [req] authorityKeyIdentifier=keyid,issuer basicConstraints=CA:FALSE keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment extendedKeyUsage = serverAuth subjectAltName = @alt_names distinguished_name = req_distinguished_name [req_distinguished_name] empty. [alt_names] DNS.1=REDACTED “` What I did next was run the following command to generate a CSR. openssl req -sha512 -new -key harbor.key -out harbor.csr -config v3.ext -subj “REDACTED” My basis for the -config argument is from the second to last line here. Anyway, the newly rekeyed cert still gives the same x509 error, so I’m just kind of at a loss. Does anyone know how to properly generate a CSR for this context? Our alternative is paying like $6k for the original contractor to fix this mess that arose from their patchy docs. submitted by /u/kp5160 [link] [comments]

X ITM Cloud News

Patricia

Leave a Reply

Next Post

deploying docker(python script) on a windows server

Thu Sep 17 , 2020
Spread the love          I’m familiar with deploying through cloud but this time round it’s slightly different and would like some inputs from the experts here as I have not tried this before. host is a windows machine and can I use Windows Scheduler to run daily based on the instruction belowhttps://datatofish.com/python-script-windows-scheduler/ […]
X- ITM

Cloud Computing – Consultancy – Development – Hosting – APIs – Legacy Systems

X-ITM Technology helps our customers across the entire enterprise technology stack with differentiated industry solutions. We modernize IT, optimize data architectures, and make everything secure, scalable and orchestrated across public, private and hybrid clouds.

This image has an empty alt attribute; its file name is x-itmdc.jpg

The enterprise technology stack includes ITO; Cloud and Security Services; Applications and Industry IP; Data, Analytics and Engineering Services; and Advisory.

Watch an animation of  X-ITM‘s Enterprise Technology Stack

We combine years of experience running mission-critical systems with the latest digital innovations to deliver better business outcomes and new levels of performance, competitiveness and experiences for our customers and their stakeholders.

X-ITM invests in three key drivers of growth: People, Customers and Operational Execution.

The company’s global scale, talent and innovation platforms serve 6,000 private and public-sector clients in 70 countries.

X-ITM’s extensive partner network helps drive collaboration and leverage technology independence. The company has established more than 200 industry-leading global Partner Network relationships, including 15 strategic partners: Amazon Web Services, AT&T, Dell Technologies, Google Cloud, HCL, HP, HPE, IBM, Micro Focus, Microsoft, Oracle, PwC, SAP, ServiceNow and VMware

.

X ITM