Difference between revisions of "Agile testbed"

@@ Line 178: / Line 178: @@
 ==== Requesting certificates from the testbed CA ====
-Kindly ask Dennis. The CA key is on his eToken, which means no one else can generate host certificates. Some time in the future this will be replaced by a simple CA setup on the testbed itself.
+There is a cheap 'n easy (and entirely untrustworthy) CA installation on bleek:/srv/ca-testbed/ca/.
+Generating a new host cert is as easy as
+ cd /srv/ca-testbed/ca
+ ./gen-host-cert.sh test.testbed
+You must enter the password for the CA key. The resulting certificate and key will be copied to
+ /var/local/hostkeys/pem/(hostname)/
+The testbed CA's files are distributed as rpm and deb package from http://bleek.nikhef.nl/extra.
 ==== Automatic configuration of machines ====

Revision as of 13:36, 24 January 2014