Updating Ziti Controller Certificates when running in Docker

How things work
1

Hey All - new here. :slight_smile:

I’m trying to update Ziti Controller certificates.

openssl s_client -connect [ip]:1280 | grep “NotBefore”
depth=2 C = US, L = Charlotte, O = NetFoundry, OU = ADV-DEV, CN = NetFoundry Inc. Certificate Authority
verify error:num=19:self-signed certificate in certificate chain
verify return:1
depth=2 C = US, L = Charlotte, O = NetFoundry, OU = ADV-DEV, CN = NetFoundry Inc. Certificate Authority
verify return:1
depth=1 C = US, L = Charlotte, O = NetFoundry, OU = ADV-DEV, CN = NetFoundry Inc. Intermediate CA
verify return:1
depth=0 C = US, L = Charlotte, O = NetFoundry, OU = ADV-DEV, CN = NetFoundry Inc. Server
verify error:num=10:certificate has expired
notAfter=Aug 20 07:30:46 2025 GMT
verify return:1
depth=0 C = US, L = Charlotte, O = NetFoundry, OU = ADV-DEV, CN = NetFoundry Inc. Server
notAfter=Aug 20 07:30:46 2025 GMT
verify return:1
v:NotBefore: Aug 20 07:29:46 2024 GMT; NotAfter: Aug 20 07:30:46 2025 GMT
v:NotBefore: Aug 20 07:29:45 2024 GMT; NotAfter: Aug 18 07:30:43 2034 GMT
v:NotBefore: Aug 20 07:29:43 2024 GMT; NotAfter: Aug 18 07:30:41 2034 GMT

I’ve stopped, removed, pulled and restarted the controller container, expecting that it would auto renew / recreate its certificates. What’s the correct way to do this?

Thanks!

2

Hi, thank you for reaching out to NetFoundry!
Since your query pertains to OpenZiti, we recommend visiting https://openziti.discourse.group/ for the most accurate and timely support.