From: Stoiko Ivanov Date: Thu, 23 Jan 2020 17:07:33 +0000 (+0100) Subject: cert-management: mention symlinks in /etc/pve X-Git-Url: https://git.proxmox.com/?a=commitdiff_plain;h=4d7de98e3835faf832518505eb82c273198740a1;p=pve-docs.git cert-management: mention symlinks in /etc/pve The warning to not replace the cluster-certificates in '/etc/pve/local' can be misleading and let users think that '/etc/pve/nodes/NODENAME/pve-ssl.pem' (and .key) are the files they should replace with a LE/externally signed certificate. Explicitly mentioning that '/etc/pve/local' is a symlink to '/etc/pve/nodes/NODENAME' should make the warning more clear. Signed-off-by: Stoiko Ivanov --- diff --git a/certificate-management.adoc b/certificate-management.adoc index 81660b2..ff1ca49 100644 --- a/certificate-management.adoc +++ b/certificate-management.adoc @@ -41,6 +41,8 @@ WARNING: Do not replace or manually modify the automatically generated node certificate files in `/etc/pve/local/pve-ssl.pem` and `/etc/pve/local/pve-ssl.key` or the cluster CA files in `/etc/pve/pve-root-ca.pem` and `/etc/pve/priv/pve-root-ca.key`. +Also keep in mind that `/etc/pve/local` is a symlink to +`/etc/pve/nodes/NODENAME`. Getting trusted certificates via ACME ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^