diff options
author | RPKI Documentation Robot <docbot@rpki.net> | 2013-06-04 03:00:25 +0000 |
---|---|---|
committer | RPKI Documentation Robot <docbot@rpki.net> | 2013-06-04 03:00:25 +0000 |
commit | 2262ef7dae4eeeb21cd7c7eb11ded64212b88a0c (patch) | |
tree | eee85a194243b7bd0884e41a4c5238f582f119f0 /doc/doc.RPKI.CA.Configuration.pubd | |
parent | 81bf607697068896a7d872cb9ae62aa6cde7052d (diff) |
Automatic pull of documentation from Wiki.
svn path=/trunk/; revision=5361
Diffstat (limited to 'doc/doc.RPKI.CA.Configuration.pubd')
-rw-r--r-- | doc/doc.RPKI.CA.Configuration.pubd | 63 |
1 files changed, 30 insertions, 33 deletions
diff --git a/doc/doc.RPKI.CA.Configuration.pubd b/doc/doc.RPKI.CA.Configuration.pubd index de00e02a..312e74c0 100644 --- a/doc/doc.RPKI.CA.Configuration.pubd +++ b/doc/doc.RPKI.CA.Configuration.pubd @@ -4,75 +4,72 @@ pubd's default configuration file is the system rpki.conf file. Start pubd with -c filename to choose a different configuration file. All options are in the section [pubd]. BPKI certificates and keys may be either DER or PEM format. -sql-database:: +***** sql-database ***** - MySQL database name for pubd. +MySQL database name for pubd. sql-database = ${myrpki::pubd_sql_database} -sql-username:: +***** sql-username ***** - MySQL user name for pubd. +MySQL user name for pubd. sql-username = ${myrpki::pubd_sql_username} -sql-password:: +***** sql-password ***** - MySQL password for pubd. +MySQL password for pubd. sql-password = ${myrpki::pubd_sql_password} -publication-base:: +***** publication-base ***** - Root of directory tree where pubd should write out published data. - You need to configure this, and the configuration should match up - with the directory where you point rsyncd. Neither pubd nor rsyncd - much cares -where- you tell them to put this stuff, the important - thing is that the rsync URIs in generated certificates match up with - the published objects so that relying parties can find and verify - rpkid's published outputs. +Root of directory tree where pubd should write out published data. You need to +configure this, and the configuration should match up with the directory where +you point rsyncd. Neither pubd nor rsyncd much cares -where- you tell them to +put this stuff, the important thing is that the rsync URIs in generated +certificates match up with the published objects so that relying parties can +find and verify rpkid's published outputs. publication-base = ${myrpki::publication_base_directory} -server-host:: +***** server-host ***** - Host on which pubd should listen for HTTP service requests. +Host on which pubd should listen for HTTP service requests. server-host = ${myrpki::pubd_server_host} -server-port:: +***** server-port ***** - Port on which pubd should listen for HTTP service requests. +Port on which pubd should listen for HTTP service requests. server-port = ${myrpki::pubd_server_port} -bpki-ta:: +***** bpki-ta ***** - Where pubd should look for the BPKI trust anchor. All BPKI - certificate verification within pubd traces back to this trust - anchor. Don't change this unless you really know what you are doing. +Where pubd should look for the BPKI trust anchor. All BPKI certificate +verification within pubd traces back to this trust anchor. Don't change this +unless you really know what you are doing. bpki-ta = ${myrpki::bpki_servers_directory}/ca.cer -pubd-cert:: +***** pubd-cert ***** - Where pubd should look for its own BPKI EE certificate. Don't change - this unless you really know what you are doing. +Where pubd should look for its own BPKI EE certificate. Don't change this +unless you really know what you are doing. pubd-cert = ${myrpki::bpki_servers_directory}/pubd.cer -pubd-key:: +***** pubd-key ***** - Where pubd should look for the private key corresponding to its own - BPKI EE certificate. Don't change this unless you really know what - you are doing. +Where pubd should look for the private key corresponding to its own BPKI EE +certificate. Don't change this unless you really know what you are doing. pubd-key = ${myrpki::bpki_servers_directory}/pubd.key -irbe-cert:: +***** irbe-cert ***** - Where pubd should look for the back-end control client's BPKI EE - certificate. Don't change this unless you really know what you are - doing. +Where pubd should look for the back-end control client's BPKI EE certificate. +Don't change this unless you really know what you are doing. irbe-cert = ${myrpki::bpki_servers_directory}/irbe.cer |