导语：harbor证书过期更新ssl证书

服务器上的harbor由docker-compose启动.

遇到的问题：下载下来的证书.pem格式需要修改成.crt格式. 否则可能出现401的情况
私钥.key格式的文件.

检查证书有效时间

openssl x509 -in /srv/cert/deepwise.com.pem -noout -dates

cat harbor.yml

# https related config
https:
#   # https port for harbor, default is 443
  port: 443
#   # The path of cert and key files for nginx
#  我这里一开始用的pem 401 
#  certificate: /srv/cert/deepwise.com.pem
  certificate: /srv/cert/harbor.deepwise.com.crt
  private_key: /srv/cert/deepwise.com.key

cat docker-compose.yml 对应的证书也需要更新

    volumes:
      - ./common/config/nginx:/etc/nginx:z
      - /fc_san/harbor-update/secret/cert:/etc/cert:z
      - type: bind
        source: ./common/config/shared/trust-certificates
        target: /harbor_cust_cert

https://blog.csdn.net/wzy_168/article/details/109577638

直接更新harbor数据库密码

https://blog.csdn.net/zfw_666666/article/details/126505610