Docker Cookbook - Second Edition

How to do it...

1. Create a directory on your host in which to put our CA and other related files:

         $ mkdir -p /etc/docker/keys
         $ cd /etc/docker/keys

2. Create the CA private and public keys:

        $ openssl genrsa -aes256 -out ca-key.pem 4096 
        $ openssl req -new -x509 -days 365 -key ca-key.pem \
                  -sha256 -out ca.pem 

3. Now, let's create the server key and certificate signing request. Make sure that the common name matches the Docker daemon system hostname. In our case, it is dockerhost.example.com:

    $ openssl genrsa -out server-key.pem 4096 
    $ openssl req -subj "/CN=dockerhost.example.com" \
                  -new -key server-key.pem -out server.csr 

4. Clients can ...