aboutsummaryrefslogtreecommitdiff
path: root/doc/doc.RPKI.CA.Configuration.pubd
diff options
context:
space:
mode:
authorRPKI Documentation Robot <docbot@rpki.net>2013-06-04 03:00:25 +0000
committerRPKI Documentation Robot <docbot@rpki.net>2013-06-04 03:00:25 +0000
commit2262ef7dae4eeeb21cd7c7eb11ded64212b88a0c (patch)
treeeee85a194243b7bd0884e41a4c5238f582f119f0 /doc/doc.RPKI.CA.Configuration.pubd
parent81bf607697068896a7d872cb9ae62aa6cde7052d (diff)
Automatic pull of documentation from Wiki.
svn path=/trunk/; revision=5361
Diffstat (limited to 'doc/doc.RPKI.CA.Configuration.pubd')
-rw-r--r--doc/doc.RPKI.CA.Configuration.pubd63
1 files changed, 30 insertions, 33 deletions
diff --git a/doc/doc.RPKI.CA.Configuration.pubd b/doc/doc.RPKI.CA.Configuration.pubd
index de00e02a..312e74c0 100644
--- a/doc/doc.RPKI.CA.Configuration.pubd
+++ b/doc/doc.RPKI.CA.Configuration.pubd
@@ -4,75 +4,72 @@ pubd's default configuration file is the system rpki.conf file. Start pubd with
-c filename to choose a different configuration file. All options are in the
section [pubd]. BPKI certificates and keys may be either DER or PEM format.
-sql-database::
+***** sql-database *****
- MySQL database name for pubd.
+MySQL database name for pubd.
sql-database = ${myrpki::pubd_sql_database}
-sql-username::
+***** sql-username *****
- MySQL user name for pubd.
+MySQL user name for pubd.
sql-username = ${myrpki::pubd_sql_username}
-sql-password::
+***** sql-password *****
- MySQL password for pubd.
+MySQL password for pubd.
sql-password = ${myrpki::pubd_sql_password}
-publication-base::
+***** publication-base *****
- Root of directory tree where pubd should write out published data.
- You need to configure this, and the configuration should match up
- with the directory where you point rsyncd. Neither pubd nor rsyncd
- much cares -where- you tell them to put this stuff, the important
- thing is that the rsync URIs in generated certificates match up with
- the published objects so that relying parties can find and verify
- rpkid's published outputs.
+Root of directory tree where pubd should write out published data. You need to
+configure this, and the configuration should match up with the directory where
+you point rsyncd. Neither pubd nor rsyncd much cares -where- you tell them to
+put this stuff, the important thing is that the rsync URIs in generated
+certificates match up with the published objects so that relying parties can
+find and verify rpkid's published outputs.
publication-base = ${myrpki::publication_base_directory}
-server-host::
+***** server-host *****
- Host on which pubd should listen for HTTP service requests.
+Host on which pubd should listen for HTTP service requests.
server-host = ${myrpki::pubd_server_host}
-server-port::
+***** server-port *****
- Port on which pubd should listen for HTTP service requests.
+Port on which pubd should listen for HTTP service requests.
server-port = ${myrpki::pubd_server_port}
-bpki-ta::
+***** bpki-ta *****
- Where pubd should look for the BPKI trust anchor. All BPKI
- certificate verification within pubd traces back to this trust
- anchor. Don't change this unless you really know what you are doing.
+Where pubd should look for the BPKI trust anchor. All BPKI certificate
+verification within pubd traces back to this trust anchor. Don't change this
+unless you really know what you are doing.
bpki-ta = ${myrpki::bpki_servers_directory}/ca.cer
-pubd-cert::
+***** pubd-cert *****
- Where pubd should look for its own BPKI EE certificate. Don't change
- this unless you really know what you are doing.
+Where pubd should look for its own BPKI EE certificate. Don't change this
+unless you really know what you are doing.
pubd-cert = ${myrpki::bpki_servers_directory}/pubd.cer
-pubd-key::
+***** pubd-key *****
- Where pubd should look for the private key corresponding to its own
- BPKI EE certificate. Don't change this unless you really know what
- you are doing.
+Where pubd should look for the private key corresponding to its own BPKI EE
+certificate. Don't change this unless you really know what you are doing.
pubd-key = ${myrpki::bpki_servers_directory}/pubd.key
-irbe-cert::
+***** irbe-cert *****
- Where pubd should look for the back-end control client's BPKI EE
- certificate. Don't change this unless you really know what you are
- doing.
+Where pubd should look for the back-end control client's BPKI EE certificate.
+Don't change this unless you really know what you are doing.
irbe-cert = ${myrpki::bpki_servers_directory}/irbe.cer