acme暂存环境显示无效证书

时间:2020-05-10 17:37:35

标签: kubernetes kubernetes-ingress cert-manager

我用staging environment创建了一个cert-manager,如下所示:

Public Class Form1
    Private Sub Button1_Click(sender As Object, e As EventArgs) Handles Button1.Click
        If TextBox1.Text = "0000" Then
            MsgBox("Registered")
            Me.Hide()
        End If
    End Sub

    Private Sub TextBox1_TextChanged(sender As Object, e As EventArgs) Handles TextBox1.TextChanged

    End Sub
End Class

并为通配符域--- apiVersion: cert-manager.io/v1alpha2 kind: ClusterIssuer metadata: name: letsencrypt-staging spec: acme: email: stage@example.io server: https://acme-staging-v02.api.letsencrypt.org/directory privateKeySecretRef: name: privateKeySecretRef solvers: - dns01: digitalocean: tokenSecretRef: name: digitalocean-dns key: access-token selector: dnsNames: - "*.dev.svc.databaker.io" - "*.stage.svc.databaker.io" --- 创建了一个证书:

*.dev.svc.databaker.io

最后是一个入口对象:

apiVersion: cert-manager.io/v1alpha2
kind: Certificate
metadata:
  name: dev-cert-staging
  namespace: dev
spec:
  secretName: secretName
  issuerRef:
    name: letsencrypt-staging
    kind: ClusterIssuer
  commonName: "*.dev.svc.databaker.io"
  dnsNames:
    - "*.dev.svc.databaker.io"

当我呼叫页面https://dashboard.dev.svc.databaker.io/时,它显示给我:

enter image description here

问题是,是否正确,它显示了无效的证书?

1 个答案:

答案 0 :(得分:3)

是的,分期用于测试证书的创建,并且对证书问题有很高的限制。

即使在您的开发环境中也可以使用生产证书发行者,但它受到限制,因此请确保您不会发送垃圾邮件。