diff options
author | RPKI Documentation Robot <docbot@rpki.net> | 2013-01-08 12:00:09 +0000 |
---|---|---|
committer | RPKI Documentation Robot <docbot@rpki.net> | 2013-01-08 12:00:09 +0000 |
commit | 53b7d85d9724585afbcb36d008597910ff4aa8fa (patch) | |
tree | d60d69cce1e9dd9d5ed15d1c1af87f0f954411fb /doc | |
parent | 130b28c5b4fe7b812ef263bd20c66be19d59a297 (diff) |
Automatic pull of documentation from Wiki.
svn path=/trunk/; revision=4955
Diffstat (limited to 'doc')
-rw-r--r-- | doc/doc.RPKI.CA.Configuration.rootd | 6 | ||||
-rw-r--r-- | doc/manual.pdf | bin | 484817 -> 484924 bytes |
2 files changed, 5 insertions, 1 deletions
diff --git a/doc/doc.RPKI.CA.Configuration.rootd b/doc/doc.RPKI.CA.Configuration.rootd index 678e2edf..f27bdd15 100644 --- a/doc/doc.RPKI.CA.Configuration.rootd +++ b/doc/doc.RPKI.CA.Configuration.rootd @@ -142,7 +142,11 @@ generate a root certificate as follows: $ openssl x509 -req -sha256 \ -signkey root.key -in root.req \ -outform DER -out root.cer \ - -extfile root.conf -extensions x509v3_extensions + -extfile root.conf -extensions x509v3_extensions \ + -days 1825 + +You may want to shorten the five year expire time (1825 days), which is a bit +long. It is a root certificate, so a longer expire is not unusual. The generated root.cer must be copied to the publication directory as defined in rpki.conf, diff --git a/doc/manual.pdf b/doc/manual.pdf Binary files differindex 836697e3..8f6912cf 100644 --- a/doc/manual.pdf +++ b/doc/manual.pdf |