diff options
Diffstat (limited to 'rpkid/doc/pubd')
| -rw-r--r-- | rpkid/doc/pubd | 19 |
1 files changed, 0 insertions, 19 deletions
diff --git a/rpkid/doc/pubd b/rpkid/doc/pubd index 20d467d5..3c29385c 100644 --- a/rpkid/doc/pubd +++ b/rpkid/doc/pubd @@ -1,5 +1,3 @@ - - ****** pubd ****** pubd is the publication daemon. @@ -9,13 +7,11 @@ to publish the certificates and other objects that rpkid generates. pubd is separate from rpkid for two reasons: - * The hosting model allows entities which choose to run their own copies of rpkid to publish their output under a common publication point. In general, encouraging shared publication services where practical is a good thing for relying parties, as it will speed up rcynic synchronization time. - * The publication server has to run on (or at least close to) the publication point itself, which in turn must be on a publically reachable server to be useful. rpkid, on the other hand, need only be reachable by the IRBE and its @@ -35,42 +31,27 @@ keys, and trust anchors may be either DER or PEM format. Config file options: - * sql-username: Username to hand to MySQL when connecting to pubd's database. - * sql-database: MySQL's database name for pubd's database. - * sql-password: Password to hand to MySQL when connecting to pubd's database. - * bpki-ta: Name of file containing master BPKI trust anchor for pubd. All BPKI validation in pubd traces back to this trust anchor. - * irbe-cert: Name of file containing BPKI certificate used by IRBE when talking to pubd. - * pubd-cert: Name of file containing BPKI certificate used by pubd. - * pubd-key: Name of file containing RSA key corresponding to pubd-cert. - * server-host: Hostname or IP address on which to listen for HTTPS connections. Current default is INADDR_ANY (IPv4 0.0.0.0); this will need to be hacked to support IPv6 for production. - * server-port: TCP port on which to listen for HTTPS connections. - * publication-base: Path to base of filesystem tree where pubd should store publishable objects. Default is "publication/". - - - - - |