[chef] Re: Re: How tdo I configure the ssl to make the chef client and server happy

[Daniel DeLeo < >]

On Thursday, July 24, 2014 at 10:54 AM, Noah Kantrowitz wrote:

> Just generate the certificate/key yourself and provide it to the server. To 
> make a self-signed cert:
>  
> $ openssl req -x509 -newkey rsa:4096 -keyout chef.key -out chef.pem -nodes 
> -days 365
>  
> And then in your /etc/chef-server/chef-server.rb (you may have to create 
> it):
>  
> nginx['ssl_certificate'] = '/etc/chef-server/chef.pem'
> nginx['ssl_certificate_key'] = '/etc/chef-server/chef.key'
>  
> You'll need to distribute the chef.pem to all clients as well, and 
> configure it as a trusted CA certificate.
>  
> --Noah
I think you’ll also need to set the SubjectAltName field to include each of 
the hostnames you wish to use.

--  
Daniel DeLeo