{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/openshift-docs/issues/1143","labels_url":"https://api.github.com/repos/openshift/openshift-docs/issues/1143/labels{/name}","comments_url":"https://api.github.com/repos/openshift/openshift-docs/issues/1143/comments","events_url":"https://api.github.com/repos/openshift/openshift-docs/issues/1143/events","html_url":"https://github.com/openshift/openshift-docs/issues/1143","id":114973025,"number":1143,"title":"Document SNI certificates","user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"milestone":null,"comments":4,"created_at":"2015-11-04T05:32:47Z","updated_at":"2015-12-08T04:42:48Z","closed_at":null,"body":"https://github.com/openshift/origin/pull/5097 added support for setting your own serving certificates for the public hostnames for your API and console servers.\r\n\r\nPlaceholder description from PR:\r\n\r\nNamed certificates can be specified in the master config (servingInfo and assetConfig.servingInfo) or in the node config (servingInfo). This allows setting a certificate to use for a particular hostname or wildcard. A default cert (servingInfo.{certFile,keyFile}) is still required in addition to namedCertificates\r\n\r\nNote: Currently, this should only be used to set certificates for the `publicMasterURL` host. Serving a different certificate to the internal `masterURL` host will result in TLS errors in infrastructure components attempting to contact the master API on the internal `masterURL` host.\r\n\r\nExample master config:\r\n```\r\nservingInfo:\r\n  ...\r\n  namedCertificates:\r\n  - certFile: custom.crt\r\n    keyFile: custom.key\r\n    names:\r\n    - \"customhost.com\"\r\n    - \"api.customhost.com\"\r\n    - \"console.customhost.com\"\r\n  - certFile: wildcard.crt\r\n    keyFile: wildcard.key\r\n    names:\r\n    - \"*.wildcardhost.com\"\r\n  ...\r\n```\r\n"},"comment":{"url":"https://api.github.com/repos/openshift/openshift-docs/issues/comments/162761201","html_url":"https://github.com/openshift/openshift-docs/issues/1143#issuecomment-162761201","issue_url":"https://api.github.com/repos/openshift/openshift-docs/issues/1143","id":162761201,"user":{"login":"Jooho","id":2375181,"avatar_url":"https://avatars.githubusercontent.com/u/2375181?v=3","gravatar_id":"","url":"https://api.github.com/users/Jooho","html_url":"https://github.com/Jooho","followers_url":"https://api.github.com/users/Jooho/followers","following_url":"https://api.github.com/users/Jooho/following{/other_user}","gists_url":"https://api.github.com/users/Jooho/gists{/gist_id}","starred_url":"https://api.github.com/users/Jooho/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Jooho/subscriptions","organizations_url":"https://api.github.com/users/Jooho/orgs","repos_url":"https://api.github.com/users/Jooho/repos","events_url":"https://api.github.com/users/Jooho/events{/privacy}","received_events_url":"https://api.github.com/users/Jooho/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T04:42:48Z","updated_at":"2015-12-08T04:42:48Z","body":"Hi @liggitt .\r\n\r\nI am trying to change default certs to custom certs for web console but it redirects  to previous url.\r\n\r\nEnvironment :\r\n  Master x3 (master[1,3].example.com)\r\n  Node x2 (node[1,2].example.com)\r\n  ETCD x3 (etcd[1,3].example.com)\r\n  LB (lb.example.com)\r\n\r\nFor example, if I want to use \"test.openshift.com\" for web console, what should I change?\r\n\r\nI changed : \r\n   lb.example.com  ==> test.openshift.com in master-config.yml from masters.\r\n  Added following:\r\n~~~\r\nservingInfo:\r\n    bindAddress: 0.0.0.0:8443\r\n    bindNetwork: tcp4\r\n    namedCertificates:\r\n     - certFile: /root/server.crt    <== custom one\r\n       keyFile: /root/server.key  <== custom one.\r\n       names:\r\n        - \"test.openshift.com\"\r\n    certFile: master.server.crt\r\n    clientCA: \"\"\r\n    keyFile: master.server.key\r\n    maxRequestsInFlight: 0\r\n    requestTimeoutSeconds: 0\r\n~~~\r\n\r\nresult :\r\n   oc login https://test.openshift.com:8443\r\n   ==> Success\r\n  \r\n  Browser https://test.openshfit.com:8443   \r\n  ==>  Changed to https://lb.example.com:8443   , Failed.\r\n\r\nWhat I have to change more?\r\n\r\nThanks in advance,\r\nJooho lee\r\n"}}