{"action":"created","issue":{"url":"https://api.github.com/repos/vmware/vic-product/issues/1828","repository_url":"https://api.github.com/repos/vmware/vic-product","labels_url":"https://api.github.com/repos/vmware/vic-product/issues/1828/labels{/name}","comments_url":"https://api.github.com/repos/vmware/vic-product/issues/1828/comments","events_url":"https://api.github.com/repos/vmware/vic-product/issues/1828/events","html_url":"https://github.com/vmware/vic-product/issues/1828","id":332302314,"node_id":"MDU6SXNzdWUzMzIzMDIzMTQ=","number":1828,"title":"Further improvements to certificate docs ","user":{"login":"stuclem","id":16718369,"node_id":"MDQ6VXNlcjE2NzE4MzY5","avatar_url":"https://avatars2.githubusercontent.com/u/16718369?v=4","gravatar_id":"","url":"https://api.github.com/users/stuclem","html_url":"https://github.com/stuclem","followers_url":"https://api.github.com/users/stuclem/followers","following_url":"https://api.github.com/users/stuclem/following{/other_user}","gists_url":"https://api.github.com/users/stuclem/gists{/gist_id}","starred_url":"https://api.github.com/users/stuclem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stuclem/subscriptions","organizations_url":"https://api.github.com/users/stuclem/orgs","repos_url":"https://api.github.com/users/stuclem/repos","events_url":"https://api.github.com/users/stuclem/events{/privacy}","received_events_url":"https://api.github.com/users/stuclem/received_events","type":"User","site_admin":false},"labels":[{"id":534225819,"node_id":"MDU6TGFiZWw1MzQyMjU4MTk=","url":"https://api.github.com/repos/vmware/vic-product/labels/area/pub","name":"area/pub","color":"B2DFDB","default":false},{"id":632865286,"node_id":"MDU6TGFiZWw2MzI4NjUyODY=","url":"https://api.github.com/repos/vmware/vic-product/labels/area/pub/cloudadmin","name":"area/pub/cloudadmin","color":"B2DFDB","default":false},{"id":625564959,"node_id":"MDU6TGFiZWw2MjU1NjQ5NTk=","url":"https://api.github.com/repos/vmware/vic-product/labels/area/pub/vsphere","name":"area/pub/vsphere","color":"B2DFDB","default":false},{"id":831452317,"node_id":"MDU6TGFiZWw4MzE0NTIzMTc=","url":"https://api.github.com/repos/vmware/vic-product/labels/priority/p0","name":"priority/p0","color":"b60205","default":false},{"id":460949432,"node_id":"MDU6TGFiZWw0NjA5NDk0MzI=","url":"https://api.github.com/repos/vmware/vic-product/labels/product/admiral","name":"product/admiral","color":"FFECB3","default":false},{"id":460949226,"node_id":"MDU6TGFiZWw0NjA5NDkyMjY=","url":"https://api.github.com/repos/vmware/vic-product/labels/product/engine","name":"product/engine","color":"FFECB3","default":false},{"id":625572464,"node_id":"MDU6TGFiZWw2MjU1NzI0NjQ=","url":"https://api.github.com/repos/vmware/vic-product/labels/product/ova","name":"product/ova","color":"FFECB3","default":false},{"id":711706050,"node_id":"MDU6TGFiZWw3MTE3MDYwNTA=","url":"https://api.github.com/repos/vmware/vic-product/labels/source/customer","name":"source/customer","color":"C8E6C9","default":false}],"state":"open","locked":false,"assignee":{"login":"stuclem","id":16718369,"node_id":"MDQ6VXNlcjE2NzE4MzY5","avatar_url":"https://avatars2.githubusercontent.com/u/16718369?v=4","gravatar_id":"","url":"https://api.github.com/users/stuclem","html_url":"https://github.com/stuclem","followers_url":"https://api.github.com/users/stuclem/followers","following_url":"https://api.github.com/users/stuclem/following{/other_user}","gists_url":"https://api.github.com/users/stuclem/gists{/gist_id}","starred_url":"https://api.github.com/users/stuclem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stuclem/subscriptions","organizations_url":"https://api.github.com/users/stuclem/orgs","repos_url":"https://api.github.com/users/stuclem/repos","events_url":"https://api.github.com/users/stuclem/events{/privacy}","received_events_url":"https://api.github.com/users/stuclem/received_events","type":"User","site_admin":false},"assignees":[{"login":"stuclem","id":16718369,"node_id":"MDQ6VXNlcjE2NzE4MzY5","avatar_url":"https://avatars2.githubusercontent.com/u/16718369?v=4","gravatar_id":"","url":"https://api.github.com/users/stuclem","html_url":"https://github.com/stuclem","followers_url":"https://api.github.com/users/stuclem/followers","following_url":"https://api.github.com/users/stuclem/following{/other_user}","gists_url":"https://api.github.com/users/stuclem/gists{/gist_id}","starred_url":"https://api.github.com/users/stuclem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stuclem/subscriptions","organizations_url":"https://api.github.com/users/stuclem/orgs","repos_url":"https://api.github.com/users/stuclem/repos","events_url":"https://api.github.com/users/stuclem/events{/privacy}","received_events_url":"https://api.github.com/users/stuclem/received_events","type":"User","site_admin":false}],"milestone":null,"comments":11,"created_at":"2018-06-14T08:33:58Z","updated_at":"2018-12-14T13:49:06Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"From an internal bug filed by @dbarkelew:\r\n\r\nThe certificate process for VIC is very confusing currently. \r\n\r\nWhen using intermediate CAs it is unclear if chains are needed in the OVA wizard. I would expect just the signed VIC Appliance certificate in the management portal certificate input and a chain of the intermediate CAs and root CA in the CA field of the install wizard. \r\n\r\nConverting the certificates to the expected format for the management portal wasn't clear. I am thinking this needs a table for converting the following to the components needed. \r\nStarting -> how to break down to the componet\r\npksc#12 -> Leaf cert, CA Chain Certificate, Private key in PKCS#8 format\r\nP7b -> Leaf Cert, Private key in PKCS#8 format\r\nRSA/PKCS#1 -> Private key in PKCS#8 format\r\n\r\nThen another table covering details required for the certificate for client authentication with the container management portal when adding a VCH. For example the customer found that a certificate did not have the correct key usage and had to be re-issued. Then struggled because container management portal needed RSA format for adding the VCH and was using PKCS#8 because that is what the ova wizard used. The certificate reference is not clear about these requirements. Have a third table discussing the VCH certificate and making sure to convert it properly also would be useful. The certificate reference does start this but is not complete.\r\nhttps://vmware.github.io/vic-product/assets/files/html/1.4/vic_vsphere_admin/vic_cert_reference.html\r\n\r\nWhat also might be useful is a one stop shop start to finish for certificates with VIC. The information seems scattered and customers are not connecting the dots between VCH, VIC Appliance and Client certificates for adding the VHC to the VIC Appliance or use with the docker-client.                   \r\n\r\nbug2138800"},"comment":{"url":"https://api.github.com/repos/vmware/vic-product/issues/comments/447330642","html_url":"https://github.com/vmware/vic-product/issues/1828#issuecomment-447330642","issue_url":"https://api.github.com/repos/vmware/vic-product/issues/1828","id":447330642,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NzMzMDY0Mg==","user":{"login":"stuclem","id":16718369,"node_id":"MDQ6VXNlcjE2NzE4MzY5","avatar_url":"https://avatars2.githubusercontent.com/u/16718369?v=4","gravatar_id":"","url":"https://api.github.com/users/stuclem","html_url":"https://github.com/stuclem","followers_url":"https://api.github.com/users/stuclem/followers","following_url":"https://api.github.com/users/stuclem/following{/other_user}","gists_url":"https://api.github.com/users/stuclem/gists{/gist_id}","starred_url":"https://api.github.com/users/stuclem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stuclem/subscriptions","organizations_url":"https://api.github.com/users/stuclem/orgs","repos_url":"https://api.github.com/users/stuclem/repos","events_url":"https://api.github.com/users/stuclem/events{/privacy}","received_events_url":"https://api.github.com/users/stuclem/received_events","type":"User","site_admin":false},"created_at":"2018-12-14T13:49:06Z","updated_at":"2018-12-14T13:49:06Z","author_association":"CONTRIBUTOR","body":"Reopening, as even though https://github.com/vmware/vic-product/pull/1918 is merged, not all of the comments in this issue or in the PR have been fully addressed yet."}}
{"actor":{"display_login":"stuclem"}}