<commit_before>// Module included in the following assemblies:
//
// * authentication/certificates/replacing-default-ingress-certificate.adoc

[id="replacing-default-ingress_{context}"]
= Replacing the default ingress certificate

You can replace the default ingress certificate for all
applications under the `.apps` subdomain. After you replace
the certificate, all applications, including the web console
and CLI, will have encryption provided by specified certificate.

.Prerequisites

* You must have a wildcard certificate and its private key,
both in the PEM format, for use.
* The certificate must have a `subjectAltName` extension of
`*apps.<clustername>.<domain>`.

.Procedure

. Create a secret that contains the wildcard certificate and key:
+
----
$ oc create secret tls <certificate> \//<1>
     --cert=</path/to/cert.crt> \//<2>
     --key=</path/to/cert.key> \//<3>
     -n openshift-ingress
----
<1> `<certificate>` is the name of the secret that will contain
the certificate and private key.
<2> `</path/to/cert.crt>` is the path to the certificate on your
local file system.
<3> `</path/to/cert.key>` is the path to the private key associated
with this certificate.

. Update the Ingress Controller configuration with the newly created<commit_msg>bug 1739495 adjusting ingress certificate extension name<commit_after>// Module included in the following assemblies:
//
// * authentication/certificates/replacing-default-ingress-certificate.adoc

[id="replacing-default-ingress_{context}"]
= Replacing the default ingress certificate

You can replace the default ingress certificate for all
applications under the `.apps` subdomain. After you replace
the certificate, all applications, including the web console
and CLI, will have encryption provided by specified certificate.

.Prerequisites

* You must have a wildcard certificate and its private key,
both in the PEM format, for use.
* The certificate must have a `subjectAltName` extension of
`*.apps.<clustername>.<domain>`.

.Procedure

. Create a secret that contains the wildcard certificate and key:
+
----
$ oc create secret tls <certificate> \//<1>
     --cert=</path/to/cert.crt> \//<2>
     --key=</path/to/cert.key> \//<3>
     -n openshift-ingress
----
<1> `<certificate>` is the name of the secret that will contain
the certificate and private key.
<2> `</path/to/cert.crt>` is the path to the certificate on your
local file system.
<3> `</path/to/cert.key>` is the path to the private key associated
with this certificate.

. Update the Ingress Controller configuration with the newly created
{'fraction_non_alphanumeric': 0.10364906832298136, 'fraction_numerical': 0.007375776397515528, 'mean_word_length': 4.092885375494071, 'pattern_counts': {'":': 0, '<': 31, '<?xml version=': 0, '>': 31, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '6437430', 'n_tokens_mistral': 748, 'n_tokens_neox': 717, 'n_words': 303}