Re: [kubernetes-users] Re: creating users /certificates for users

2017-09-30 Thread Nathan Taylor
request: $(cat $CSR_FILE | base64 | tr -d '\n') > > usages: > > - digital signature > > - key encipherment > > - client auth > > EOF > > > Where the last line "client auth" used to be "server auth" before. > > With c

Re: [kubernetes-users] Re: creating users /certificates for users

2017-09-30 Thread Nathan Taylor
request: $(cat $CSR_FILE | base64 | tr -d '\n') > > usages: > > - digital signature > > - key encipherment > > - client auth > > EOF > > > Where the last line "client auth" used to be "server auth" before. > > With c

[kubernetes-users] Re: creating users /certificates for users

2017-09-28 Thread Nathan Taylor
It's interesting that the logs are stating that it is a keyusage error. Can you get the keyusage for your generated cert and the ca.crt you used to generate it? The command to do so is: openssl x509 -in -purpose -noout -text Nathan On Wednesday, September 27, 2017 at 6:39:54 AM UTC-6, Henni