About stangri-la

There's a ton of confusion around getting the certs to work.  The documentation isn't very clear but this is what worked for me (I have a .pem wildcard certificate from a CA).   1. Rename the .pem certificate with a .crt extension.  Open the file with a text editor and copy everything starting with  -----BEGIN PRIVATE KEY----- and ending with -----END PRIVATE KEY----- and paste into a new file and save it with the same name and a .pem extension.  There should now be two files on your local machine: <your_cert>.crt and <your_cert>.pem.   2. Transfer both files from your local machine to  /var/lib/minemeld   3. Stop and remove the current container [stang@docker   ~]$ sudo docker stop minemeld [stang@docker   ~]$ sudo docker rm minemeld   4. Start the container [stang@docker   ~]$ sudo docker run -dit \ > --name minemeld \ > --restart unless-stopped \ > --tmpfs /run \ > -v minemeld-local:/opt/minemeld/local \ > -v minemeld-logs:/opt/minemeld/log \ > -v /var/lib/minemeld/<your_cert>.crt:/etc/nginx/minemeld.cer:ro \ > -v /var/lib/minemeld/<your_cert>.pem:/etc/nginx/minemeld.pem:ro \ > -p   443:443   -p   80:80   \ > paloaltonetworks/minemeld     ... View more

@Tony-Arnold .crt (.cer) is the certificate chain and .pem is the private key. ... View more