Changes between Version 14 and Version 15 of FeddConfig

Timestamp:

Dec 22, 2008 3:33:48 PM (15 years ago)

Author:

faber

Comment:

--

FeddConfig

@@ -32 +32 @@
         global fedid -> access attribute mapping database.  See the [FeddDatabases databases section] for information on the format and generation methods.
  '''cert_file'''::
-        the file containing the X509 certificate and private key for this 
+        the file containing the [FeddConfig#MakingaFedidCertificate certificate and private key] for this 
         server, in pem format.
  '''cert_pwd'''::
@@ -201 +201 @@
  '''tcl_splitter'''::
   Script to do the splitting.  Default is `/usr/testbed/lib/ns2ir/parse.tcl`.  Most Emulabs will not include a `parse.tcl` capable of doing the split.
+
+== Making a Fedid Certificate ==
+
+Each `fedd` and client encodes an [FeddAbout#GlobalIdentifiers:Fedids fedid] as an X.509 certificate.  The `openssl` command installed on most Unices can create such a certificate.  The simplest things to do is the following:
+
+{{{
+$ /usr/bin/openssl req -text -newkey rsa:1024 -keyout key.pem -nodes -subj /CN=users.isi.deterlab.net -x509 -days 3650 -out cert.pem
+$ cat key.pem cert.pem > fedd.pem
+}}}
+
+The resulting `fedd.pem` file contains an unencrypted private key and certificate.  To put a password on the key, see the `req` manual page.