mirror of
https://git.proxmox.com/git/mirror_corosync
synced 2025-10-31 19:22:26 +00:00
74 lines
3.1 KiB
Groff
74 lines
3.1 KiB
Groff
.\"/*
|
|
.\" * Copyright (C) 2016 Red Hat, Inc.
|
|
.\" *
|
|
.\" * All rights reserved.
|
|
.\" *
|
|
.\" * Author: Jan Friesse <jfriesse@redhat.com>
|
|
.\" *
|
|
.\" * This software licensed under BSD license, the text of which follows:
|
|
.\" *
|
|
.\" * Redistribution and use in source and binary forms, with or without
|
|
.\" * modification, are permitted provided that the following conditions are met:
|
|
.\" *
|
|
.\" * - Redistributions of source code must retain the above copyright notice,
|
|
.\" * this list of conditions and the following disclaimer.
|
|
.\" * - Redistributions in binary form must reproduce the above copyright notice,
|
|
.\" * this list of conditions and the following disclaimer in the documentation
|
|
.\" * and/or other materials provided with the distribution.
|
|
.\" * - Neither the name of Red Hat, Inc. nor the names of its
|
|
.\" * contributors may be used to endorse or promote products derived from this
|
|
.\" * software without specific prior written permission.
|
|
.\" *
|
|
.\" * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
|
|
.\" * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
.\" * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
.\" * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
|
|
.\" * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
|
|
.\" * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
|
|
.\" * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
|
|
.\" * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
|
|
.\" * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
.\" * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
|
|
.\" * THE POSSIBILITY OF SUCH DAMAGE.
|
|
.\" */
|
|
.TH COROSYNC-QNETD-CERTUTIL 8 2016-06-28
|
|
.SH NAME
|
|
corosync-qnetd-certutil - tool to generate qnetd TLS certificates
|
|
.SH SYNOPSIS
|
|
.B "corosync-qnetd-certutil [-i|-s] [-c certificate] [-n cluster_name]"
|
|
.SH DESCRIPTION
|
|
.B corosync-qnetd-certutil
|
|
is frontend for NSS certutil used for generating QNetd CA, server certificate and
|
|
signing cluster certificate used by
|
|
.B corosync-qdevice
|
|
model net.
|
|
.SH OPTIONS
|
|
.TP
|
|
.B -i
|
|
Initialize QNetd NSS certificate database and generate QNetd CA and server certificate.
|
|
Default directory with database is /etc/corosync/qnetd. This directory has to be
|
|
writable by current user. QNetd CA certificate is also exported into file
|
|
/etc/corosync/qnetd/nssdb/qnetd-cacert.crt.
|
|
.TP
|
|
.B -s
|
|
Sign cluster certificate. It's required to pass name of cluster (equal to
|
|
one configured in corosync.conf) and certificate request file. Signed certificate is
|
|
stored into file /etc/corosync/qnetd/nssdb/cluster-$ClusterName.crt
|
|
.TP
|
|
.B -c
|
|
Certificate request file to sign.
|
|
.TP
|
|
.B -n
|
|
Name of the cluster.
|
|
.SH NOTES
|
|
If qnetd is executed by non root user, /etc/corosync/qnetd and it's subdirectories has to have
|
|
set owner (and/or group) to given user. If
|
|
.B corosync-qnetd-certutil
|
|
is executed as root it tries to copy owner and group of /etc/corosync/qnetd to all its created files.
|
|
.SH SEE ALSO
|
|
.BR corosync-qnetd (8)
|
|
.BR corosync-qdevice (8)
|
|
.SH AUTHOR
|
|
Jan Friesse
|
|
.PP
|