From 1bffa1e167ee4d90b1fee0707dcc248ffec10f72 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Claus=20Pr=C3=BCfer?= Date: Tue, 5 Dec 2023 00:34:14 +0100 Subject: [PATCH] Update README.md Moved subjectAltName to new topic "Remarks", i think it is not annotation / ingress related --- docs/examples/auth/client-certs/README.md | 17 ++++++++++------- 1 file changed, 10 insertions(+), 7 deletions(-) diff --git a/docs/examples/auth/client-certs/README.md b/docs/examples/auth/client-certs/README.md index 73a4555f3..ee8e5715b 100644 --- a/docs/examples/auth/client-certs/README.md +++ b/docs/examples/auth/client-certs/README.md @@ -92,13 +92,6 @@ tls: secretName: tls-secret ``` -| :exclamation: In future releases, CN verification seems to be "replaced" by SAN (Subject Alternate Name) for verrification, so do not forget to add | -|-----------------------------------------------------------------------------------------------------------------------------------------------------| - -```bash -openssl req -addext "subjectAltName = DNS:mydomain.com" ... -``` - ## 4. Example / Test The working .yaml Eyample: [ingress.yaml](ingress.yaml) @@ -113,3 +106,13 @@ wget \ --private-key=client-key.pem \ https://mydomain.com ``` + +## 5. Remarks + +| :exclamation: In future releases, CN verification seems to be "replaced" by SAN (Subject Alternate Name) for verrification, so do not forget to add | +|-----------------------------------------------------------------------------------------------------------------------------------------------------| + +```bash +openssl req -addext "subjectAltName = DNS:mydomain.com" ... +``` +