Question

我有一个具有CN = site.dev和ext3 DNS域（包括site.dev的自签名site.dev证书，作为default ns中k8s的秘密，其中有{{1 }}和键：type: kubernetes.io/tls和tls.crt。由于它是自签名的，因此它不包含中间证书（不能）。

Traefik与args一起运行：

tls.key

当入口开始时，Traefik记录：

- --configfile=/config/traefik.toml - --defaultentrypoints=https,http - --entrypoints=Name:https Address::443 TLS - --entrypoints=Name:http Address::80

入口有

{"level":"error","msg":"Error configuring TLS for ingress default/site-dev: secret default/site-dev-tls does not exist","time":"2019-04-20T21:09:02Z"}

这是curl的输出：

  tls:
  - secretName: site-dev-tls`

curl https://site.dev:443/ -v
*   Trying 127.0.0.1...
* TCP_NODELAY set
* Connected to site.dev (127.0.0.1) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1
* Cipher selection: ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH
* successfully set certificate verify locations:
*   CAfile: /etc/ssl/cert.pem
  CApath: none
* TLSv1.2 (OUT), TLS handshake, Client hello (1):
* error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number
* stopped the pause stream!
* Closing connection 0
curl: (35) error:1400410B:SSL routines:CONNECT_CR_SRVR_HELLO:wrong version number

$ curl http://site.dev:443/
404 page not found

我不确定自己在做什么错...感谢任何帮助。

Traefik找不到TLS机密

0 个答案: