diff options
| author | Chris St. Pierre <chris.a.st.pierre@gmail.com> | 2012-08-27 13:46:51 -0400 |
|---|---|---|
| committer | Chris St. Pierre <chris.a.st.pierre@gmail.com> | 2012-08-27 13:46:51 -0400 |
| commit | 18746a094e0ebfe3f16cc34c765e69e707e4c1ad (patch) | |
| tree | 82b80cdbb5f89af3ddc1b9021354a00e9b5e42b8 | |
| parent | f0a75666bfe2d101ac5b99534680047b47ec1224 (diff) | |
| download | bcfg2-18746a094e0ebfe3f16cc34c765e69e707e4c1ad.tar.gz bcfg2-18746a094e0ebfe3f16cc34c765e69e707e4c1ad.tar.bz2 bcfg2-18746a094e0ebfe3f16cc34c765e69e707e4c1ad.zip | |
Docs: cleaned up SSLCA docs
| -rw-r--r-- | doc/server/plugins/generators/sslca.txt | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/server/plugins/generators/sslca.txt b/doc/server/plugins/generators/sslca.txt index d2b051535..4c7f1d97f 100644 --- a/doc/server/plugins/generators/sslca.txt +++ b/doc/server/plugins/generators/sslca.txt @@ -49,7 +49,8 @@ must contain full (not relative) paths. certificate. This is used when preexisting certifcate hostfiles are found, so that they can be validated and only regenerated if they no longer meet the specification. If you're using a self signing CA this would be the CA cert - that you generated. + that you generated. If the chain cert is a root CA cert (e.g., if it is a + self-signing CA), also add an entry ``root_ca = true``. #. Optionally, add ``verify_certs = false`` if you don't wish to perform certificate verification on the certs SSLCA generates. @@ -64,6 +65,7 @@ must contain full (not relative) paths. config = /etc/pki/CA/openssl.cnf passphrase = youReallyThinkIdShareThis? chaincert = /etc/pki/CA/chaincert.crt + root_ca = true #. You are now ready to create key and certificate definitions. For this example we'll assume you've added Path entries for the key, |