mirror of https://github.com/istio/istio.io.git
Small tweaks for Security (#626)
* Small tweaks for Security * Update url * address comment
This commit is contained in:
parent
5389f5b338
commit
0173744bd4
|
|
@ -85,7 +85,7 @@ identity provisioning. This agent runs on each node (VM / physical machine) and
|
||||||
|
|
||||||
- **Bring Your Own CA Certificates**. Allows users to provide their own key and certificate for Istio CA.
|
- **Bring Your Own CA Certificates**. Allows users to provide their own key and certificate for Istio CA.
|
||||||
|
|
||||||
- **Persistent CA Key/Certificate Storage**. Istio CA now supports storing signing key/certificates in
|
- **Persistent CA Key/Certificate Storage**. Istio CA now stores signing key/certificates in
|
||||||
persistent storage to facilitate CA restarts.
|
persistent storage to facilitate CA restarts.
|
||||||
|
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -92,7 +92,7 @@ There are several steps:
|
||||||
|
|
||||||
1. send requests to another service, for example, details.
|
1. send requests to another service, for example, details.
|
||||||
```bash
|
```bash
|
||||||
curl https://details:9080 -v --key /etc/certs/key.pem --cert /etc/certs/cert-chain.pem --cacert /etc/certs/root-cert.pem -k
|
curl https://details:9080/details/0 -v --key /etc/certs/key.pem --cert /etc/certs/cert-chain.pem --cacert /etc/certs/root-cert.pem -k
|
||||||
```
|
```
|
||||||
```bash
|
```bash
|
||||||
...
|
...
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue