danieldean commented on PR #53574: URL: https://github.com/apache/airflow/pull/53574#issuecomment-3094747264
Although there are no config changes with this the self-signed certificate does need subject alt names set: ``` openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -sha256 -days 3650 -nodes \ -subj "CN=<common name>" \ -addext "subjectAltName=DNS:localhost,DNS:airflow-apiserver" ``` For the certificate to be accepted (this is based on the quick start docker-compose.yaml). As well as the cert being passed to to curl using `curl --cacert ` for the apiserver health check and the need to change the apiserver url from HTTP to HTTPS. I think this should be documented somewhere but I am unsure where the best place would be. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
