Changes between Version 5 and Version 6 of Configuration

Timestamp:

Mar 1, 2011, 2:13:54 PM (13 years ago)

Author:

Sebastien Decugis

Comment:

--

Configuration

@@ -187 +187 @@
  * Case of more peers
 
-In order to avoid copying the self-signed certificates between all peers, it is probably easier to set up a fake CA and have this CA sign all your peers certificates.
-
-It is the scenario we are using in our testbed, therefore you might find the following resources useful (especially if you have a storage shared with all your peers).
+In order to avoid copying the self-signed certificates between all peers (you'd have to copy each peer certificate to all other peers), it is probably easier to set up a fake CA and have this CA sign all your peers certificates.
+
+It is the scenario we are using in our testbed, therefore you might find the following resources useful:
  [source:freeDiameter/contrib/PKI contrib/PKI]::
-   This folder contains some scripts that can help you managing this "fake" CA. You may find a few more details in the [source:freeDiameter/contrib/README contrib/README] file.
+   This folder contains some scripts that can help you managing this "fake" CA. You will find a few more details in the [source:freeDiameter/contrib/README contrib/README] file. The easiest way is to have a storage shared with all your peers, and have this fake PKI files reside in this storage. Otherwise you may find the {{{make ship}}} target from {{{ca_script2}}} script in this directory useful.
 
  [source:VirtualTestbed/ca/rebuild_tree.sh rebuild_tree.sh]::
-   This is the script we use to generate all the certificates of our test machines. It uses the Makefile from ca_script2 included in the contrib/PKI folder. It shows an example of how to use this script to generate all the peers certificates. Check the script [source:VirtualTestbed/scripts/ca-install.sh ca-install.sh] for an example of how we use the generated certificates in each node.
+   This is the script we use to generate all the certificates of our test machines. It uses the Makefile from {{{ca_script2}}}. It shows an example of how to use this script to generate all the peers certificates. Check the script [source:VirtualTestbed/scripts/ca-install.sh ca-install.sh] for an example of how we use the generated certificates in each node.