flynn

How to obtain TLS pin from flynn cluster?


When adding a new cluster the following command must be used:

flynn cluster add -p <tls pin> <cluster name> <controller domain> <controller key>

Where do you obtain the <tls pin>?


Solution

  • You can generate the TLS Pin with the following command:

    openssl s_client -connect controller.$CLUSTER_DOMAIN:443 \
      -servername controller.$CLUSTER_DOMAIN 2>/dev/null </dev/null \
      | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' \
      | openssl x509 -inform PEM -outform DER \
      | openssl dgst -binary -sha256 \
      | openssl base64
    

    (be sure to set CLUSTER_DOMAIN first, e.g. CLUSTER_DOMAIN=xxxx.flynnhub.com)