Chapter 2. Adding trusted certificate authorities

Procedure

1. Download the ca-setup.sh script.

   Note
   • If you are doing a new installation, you can find the ca-setup.sh script in the scripts directory at central-bundle/central/scripts/ca-setup.sh.
   • You must run the ca-setup.sh script in the same terminal from which you logged into your OpenShift Container Platform cluster.

2. Make the ca-setup.sh script executable:

   $ chmod +x ca-setup.sh

3. Add the certificates by using one of the following options:

   1. To add a single certificate, use the -f option to specify the certificate file:

      $ ./ca-setup.sh -f <certificate>

      Note
      • You must use a PEM-encoded certificate file. The file can have any extension.
      • To update a certificate that you added before, use the -u option along with the -f option.

   2. To add many certificates at once, move all the certificates into a directory, and then use the -d option to specify that directory:

      $ ./ca-setup.sh -d <directory_name>

      Note
      • You must use PEM-encoded certificate files with a .crt or .pem extension.
      • Each file must contain only a single certificate.
      • To update certificates that you added before, use the -u option along with the -d option.