harbor 2.x配置https

mkdir -p /root/harbor/ssl
cd /root/harbor/ssl

openssl genrsa -out ca.key 4096


openssl req -x509 -new -nodes -sha512 -days 3650 \
 -subj "/C=CN/ST=Wuhan/L=Wuhan/O=example/OU=Personal/CN=harbor.dmgeo.com" \
 -key ca.key \
 -out ca.crt

openssl genrsa -out harbor.dmgeo.com.key 4096

openssl req -sha512 -new \
    -subj "/C=CN/ST=Wuhan/L=Wuhan/O=example/OU=Personal/CN=harbor.dmgeo.com" \
    -key harbor.dmgeo.com.key \
    -out harbor.dmgeo.com.csr


cat > v3.ext <<-EOF
authorityKeyIdentifier=keyid,issuer
basicConstraints=CA:FALSE
keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment
extendedKeyUsage = serverAuth
subjectAltName = @alt_names
[alt_names]
DNS.1=harbor.dmgeo.com
DNS.2=harbor.dmgeo
DNS.3=harbor
EOF

openssl x509 -req -sha512 -days 3650 \
    -extfile v3.ext \
    -CA ca.crt -CAkey ca.key -CAcreateserial \
    -in harbor.dmgeo.com.csr \
    -out harbor.dmgeo.com.crt

mkdir -p /data/cert
cp harbor.dmgeo.com.crt /data/cert/
cp harbor.dmgeo.com.key /data/cert/

openssl x509 -inform PEM -in harbor.dmgeo.com.crt -out harbor.dmgeo.com.cert

mkdir -p /etc/docker/certs.d/harbor.dmgeo.com/
cp harbor.dmgeo.com.cert /etc/docker/certs.d/harbor.dmgeo.com/
cp harbor.dmgeo.com.key /etc/docker/certs.d/harbor.dmgeo.com/
cp ca.crt /etc/docker/certs.d/harbor.dmgeo.com/

systemctl restart docker

cd /root/harbor-install/
docker-compose down -v
vim harbor.yml
	hostname: harbor.dmgeo.com
	https:
	  # https port for harbor, default is 443
	  port: 443
	  # The path of cert and key files for nginx
	  certificate: /data/cert/harbor.dmgeo.com.crt
	  private_key: /data/cert/harbor.dmgeo.com.key
docker-compose up -d