aboutsummaryrefslogtreecommitdiff
path: root/doc/doc.RPKI.CA.Configuration.rootd
diff options
context:
space:
mode:
authorMichael Elkins <melkins@tislabs.com>2012-11-12 04:05:47 +0000
committerMichael Elkins <melkins@tislabs.com>2012-11-12 04:05:47 +0000
commit446299e9189331fc09fe6b838919bf8d0ff2a7e8 (patch)
treefcecc2e854e5b43bbdf4f96e3eb8436fd7eef0a3 /doc/doc.RPKI.CA.Configuration.rootd
parent7935cc245662541328446e98e4c315678a2254aa (diff)
parent53a89ee6c1d1bf3ada5b1ba55b533d4ff2e61543 (diff)
merge with /trunk
svn path=/branches/tk274/; revision=4849
Diffstat (limited to 'doc/doc.RPKI.CA.Configuration.rootd')
-rw-r--r--doc/doc.RPKI.CA.Configuration.rootd6
1 files changed, 6 insertions, 0 deletions
diff --git a/doc/doc.RPKI.CA.Configuration.rootd b/doc/doc.RPKI.CA.Configuration.rootd
index faccef07..678e2edf 100644
--- a/doc/doc.RPKI.CA.Configuration.rootd
+++ b/doc/doc.RPKI.CA.Configuration.rootd
@@ -144,6 +144,12 @@ generate a root certificate as follows:
-outform DER -out root.cer \
-extfile root.conf -extensions x509v3_extensions
+The generated root.cer must be copied to the publication directory as defined
+in rpki.conf,
+
+ rpki-root-cert = ${myrpki::publication_base_directory}/
+ root.cer
+
To create a TAL format trust anchor locator use
$ $top/rcynic/make-tal.sh <rsync URI of root.cer> <local copy of root.cer>