diff --git a/docs/sources/articles/https.md b/docs/sources/articles/https.md index eea48511a7..94d9ca3f22 100644 --- a/docs/sources/articles/https.md +++ b/docs/sources/articles/https.md @@ -71,12 +71,11 @@ name) matches the hostname you will use to connect to Docker: Next, we're going to sign the public key with our CA: -Since tls connections can be made via IP address as well as dns name, -this extension allows for your client to connect via IP address. You will -need to replace $YOUR_IP_ADDRESS with your IP address. If there -is more than one simply continue to add them separated by commas. +Since TLS connections can be made via IP address as well as DNS name, they need +to be specified when creating the certificate. For example, to allow connections +using `10.10.10.20` and `127.0.0.1`: - $ echo subjectAltName = IP:$YOUR_PUBLIC_IP > extfile.cnf + $ echo subjectAltName = IP:10.10.10.20,IP:127.0.0.1 > extfile.cnf $ openssl x509 -req -days 365 -in server.csr -CA ca.pem -CAkey ca-key.pem \ -CAcreateserial -out server-cert.pem -extfile extfile.cnf