From 6caae5881492b75658dc26106ce25ab6369c0633 Mon Sep 17 00:00:00 2001 From: Yicheng Qin Date: Mon, 17 Aug 2015 22:56:32 -0700 Subject: [PATCH] docs/security: recommend cfssl instead of etcd-ca This provides a more general and stable way for users to set TLS cluster. --- Documentation/security.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Documentation/security.md b/Documentation/security.md index 84d3123b2..d65b47cb3 100644 --- a/Documentation/security.md +++ b/Documentation/security.md @@ -4,7 +4,7 @@ etcd supports SSL/TLS as well as authentication through client certificates, bot To get up and running you first need to have a CA certificate and a signed key pair for one member. It is recommended to create and sign a new key pair for every member in a cluster. -For convenience the [etcd-ca](https://github.com/coreos/etcd-ca) tool provides an easy interface to certificate generation, alternatively this site provides a good reference on how to generate self-signed key pairs: +For convenience the [cfssl](https://github.com/cloudflare/cfssl) tool provides an easy interface to certificate generation, and we provide a full example using the tool at [here](../hack/tls-setup). Alternatively this site provides a good reference on how to generate self-signed key pairs: http://www.g-loaded.eu/2005/11/10/be-your-own-ca/