X-Git-Url: https://git.arvados.org/arvados.git/blobdiff_plain/7a91ab4360a3578245e5ffb67d0d2ac14778ee01..81a48dd1327179d7977f26f65b3d71458ca0ca9e:/doc/_includes/_ssl_config_multi.liquid?ds=sidebyside diff --git a/doc/_includes/_ssl_config_multi.liquid b/doc/_includes/_ssl_config_multi.liquid index d001a5f228..b4d6eff616 100644 --- a/doc/_includes/_ssl_config_multi.liquid +++ b/doc/_includes/_ssl_config_multi.liquid @@ -4,25 +4,13 @@ Copyright (C) The Arvados Authors. All rights reserved. SPDX-License-Identifier: CC-BY-SA-3.0 {% endcomment %} -h2(#certificates). Choose the SSL configuration (SSL_MODE) +h2(#certificates). Choose the SSL/TLS configuration (SSL_MODE) -Arvados requires an SSL certificate to work correctly. This installer supports these options: +Arvados requires a valid TLS certificate to work correctly. This installer supports these options: -# @self-signed@: "let the installer create self-signed certificates":#self-signed # @lets-encrypt@: "automatically obtain and install an SSL certificates for your hostnames":#lets-encrypt # @bring-your-own@: "supply your own certificates in the @certs@ directory":#bring-your-own -h3(#self-signed). Using self-signed certificates - -To make the installer use self-signed certificates, change the configuration like this: - - -
SSL_MODE="self-signed"
-
-
- -Before connecting to the Arvados web interface for the first time, anyone accessing the instance will need to "install the self-signed root certificate in their browser.":#ca_root_certificate - h3(#lets-encrypt). Using a Let's Encrypt certificate In the default configuration, this installer gets a valid certificate via Let's Encrypt. If you have the CLUSTER.DOMAIN domain in a route53 zone, you can set USE_LETSENCRYPT_ROUTE53 to YES and supply appropriate credentials so that Let's Encrypt can use dns-01 validation to get the appropriate certificates.