Navigation


Changes between Version 5 and Version 6 of Configuration


Ignore:
Timestamp:
Mar 1, 2011, 2:13:54 PM (10 years ago)
Author:
Sebastien Decugis
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • Configuration

    v5 v6  
    187187 * Case of more peers
    188188
    189 In order to avoid copying the self-signed certificates between all peers, it is probably easier to set up a fake CA and have this CA sign all your peers certificates.
    190 
    191 It is the scenario we are using in our testbed, therefore you might find the following resources useful (especially if you have a storage shared with all your peers).
     189In order to avoid copying the self-signed certificates between all peers (you'd have to copy each peer certificate to all other peers), it is probably easier to set up a fake CA and have this CA sign all your peers certificates.
     190
     191It is the scenario we are using in our testbed, therefore you might find the following resources useful:
    192192 [source:freeDiameter/contrib/PKI contrib/PKI]::
    193    This folder contains some scripts that can help you managing this "fake" CA. You may find a few more details in the [source:freeDiameter/contrib/README contrib/README] file.
     193   This folder contains some scripts that can help you managing this "fake" CA. You will find a few more details in the [source:freeDiameter/contrib/README contrib/README] file. The easiest way is to have a storage shared with all your peers, and have this fake PKI files reside in this storage. Otherwise you may find the {{{make ship}}} target from {{{ca_script2}}} script in this directory useful.
    194194
    195195 [source:VirtualTestbed/ca/rebuild_tree.sh rebuild_tree.sh]::
    196    This is the script we use to generate all the certificates of our test machines. It uses the Makefile from ca_script2 included in the contrib/PKI folder. It shows an example of how to use this script to generate all the peers certificates. Check the script [source:VirtualTestbed/scripts/ca-install.sh ca-install.sh] for an example of how we use the generated certificates in each node.
     196   This is the script we use to generate all the certificates of our test machines. It uses the Makefile from {{{ca_script2}}}. It shows an example of how to use this script to generate all the peers certificates. Check the script [source:VirtualTestbed/scripts/ca-install.sh ca-install.sh] for an example of how we use the generated certificates in each node.
    197197
    198198