aboutsummaryrefslogtreecommitdiff
path: root/doc/doc.RPKI.CA.Configuration.rootd
diff options
context:
space:
mode:
authorRPKI Documentation Robot <docbot@rpki.net>2013-06-04 02:44:58 +0000
committerRPKI Documentation Robot <docbot@rpki.net>2013-06-04 02:44:58 +0000
commit3601076b49a9c79edaeed47d2a6b764df6ec4f76 (patch)
treed7dee53c822f0edbfe3b8d466a644e55b71d21eb /doc/doc.RPKI.CA.Configuration.rootd
parent3ec3b1ee4704e4b7a1ca60e16a652c67def015c7 (diff)
Automatic pull of documentation from Wiki.
svn path=/trunk/; revision=5358
Diffstat (limited to 'doc/doc.RPKI.CA.Configuration.rootd')
-rw-r--r--doc/doc.RPKI.CA.Configuration.rootd42
1 files changed, 21 insertions, 21 deletions
diff --git a/doc/doc.RPKI.CA.Configuration.rootd b/doc/doc.RPKI.CA.Configuration.rootd
index e14aa474..87a2290c 100644
--- a/doc/doc.RPKI.CA.Configuration.rootd
+++ b/doc/doc.RPKI.CA.Configuration.rootd
@@ -1,4 +1,4 @@
-****** ![rootd] section ******
+****** [rootd] section ******
You don't need to run rootd unless you're IANA, are certifying private address
space, or are an RIR which refuses to accept IANA as the root of the public
@@ -28,28 +28,28 @@ bpki-ta::
certificate verification within rootd traces back to this trust
anchor. Don't change this unless you really know what you are doing.
- Default: ${myrpki::bpki_servers_directory}/ca.cer
+ bpki-ta = ${myrpki::bpki_servers_directory}/ca.cer
rootd-bpki-crl::
BPKI CRL. Don't change this unless you really know what you are
doing.
- Default: ${myrpki::bpki_servers_directory}/ca.crl
+ rootd-bpki-crl = ${myrpki::bpki_servers_directory}/ca.crl
rootd-bpki-cert::
rootd's own BPKI EE certificate. Don't change this unless you really
know what you are doing.
- Default: ${myrpki::bpki_servers_directory}/rootd.cer
+ rootd-bpki-cert = ${myrpki::bpki_servers_directory}/rootd.cer
rootd-bpki-key::
Private key corresponding to rootd's own BPKI EE certificate. Don't
change this unless you really know what you are doing.
- Default: ${myrpki::bpki_servers_directory}/rootd.key
+ rootd-bpki-key = ${myrpki::bpki_servers_directory}/rootd.key
child-bpki-cert::
@@ -57,19 +57,19 @@ child-bpki-cert::
to which rootd issues an RPKI certificate). Don't change this unless
you really know what you are doing.
- Default: ${myrpki::bpki_servers_directory}/child.cer
+ child-bpki-cert = ${myrpki::bpki_servers_directory}/child.cer
server-host::
Server host on which rootd should listen.
- Default: ${myrpki::rootd_server_host}
+ server-host = ${myrpki::rootd_server_host}
server-port::
Server port on which rootd should listen.
- Default: ${myrpki::rootd_server_port}
+ server-port = ${myrpki::rootd_server_port}
rpki-root-dir::
@@ -77,71 +77,71 @@ rpki-root-dir::
instead of publishing directly, but it doesn't. This needs to match
pubd's configuration.
- Default: ${myrpki::publication_base_directory}
+ rpki-root-dir = ${myrpki::publication_base_directory}
rpki-base-uri::
rsync URI corresponding to directory containing rootd's outputs.
- Default: `rsync://${myrpki::publication_rsync_server}/${myrpki::publ
- ication_rsync_module}/`
+ rpki-base-uri = rsync://${myrpki::publication_rsync_server}/${myrpki::
+ publication_rsync_module}/
rpki-root-cert-uri::
rsync URI for rootd's root (self-signed) RPKI certificate.
- Default: `rsync://${myrpki::publication_rsync_server}/${myrpki::publ
- ication_root_module}/root.cer`
+ rpki-root-cert-uri = rsync://${myrpki::publication_rsync_server}/${myrpki::
+ publication_root_module}/root.cer
rpki-root-key::
Private key corresponding to rootd's root RPKI certificate.
- Default: ${myrpki::bpki_servers_directory}/root.key
+ rpki-root-key = ${myrpki::bpki_servers_directory}/root.key
rpki-root-cert::
Filename (as opposed to rsync URI) of rootd's root RPKI certificate.
- Default: ${myrpki::publication_root_cert_directory}/root.cer
+ rpki-root-cert = ${myrpki::publication_root_cert_directory}/root.cer
rpki-subject-pkcs10::
Where rootd should stash a copy of the PKCS #10 request it gets from
its one (and only) child
- Default: ${myrpki::bpki_servers_directory}/rootd.subject.pkcs10
+ rpki-subject-pkcs10 = ${myrpki::bpki_servers_directory}/rootd.subject.pkcs10
rpki-subject-lifetime::
Lifetime of the one and only RPKI certificate rootd issues.
- Default: 30d
+ rpki-subject-lifetime = 30d
rpki-root-crl::
Filename (relative to rootd-base-uri and rpki-root-dir) of the CRL
for rootd's root RPKI certificate.
- Default: root.crl
+ rpki-root-crl = root.crl
rpki-root-manifest::
Filename (relative to rootd-base-uri and rpki-root-dir) of the
manifest for rootd's root RPKI certificate.
- Default: root.mft
+ rpki-root-manifest = root.mft
rpki-class-name::
Up-down protocol class name for RPKI certificate rootd issues to its
one (and only) child.
- Default: ${myrpki::handle}
+ rpki-class-name = ${myrpki::handle}
rpki-subject-cert::
Filename (relative to rootd-base-uri and rpki-root-dir) of the one
(and only) RPKI certificate rootd issues.
- Default: ${myrpki::handle}.cer
+ rpki-subject-cert = ${myrpki::handle}.cer