List what the self-signed CA should return to the node operator

This commit is contained in:
Troy McConaghy 2017-06-26 15:54:09 +02:00
parent 6fd5f21638
commit 3a24e7d9b4

View File

@ -119,9 +119,13 @@ allow easier periodic rotation of the ``Agent API Key`` with a constant
#. Client Certificate for BigchainDB Server to identify itself to MongoDB
#. Client Certificate for MongoDB Monitoring Agent to identify itself to MongoDB
#. Client Certificate for MongoDB Backup Agent to identify itself to MongoDB
#. CRL for the infrastructure to not accept revoked certificates.
Ask the managing organization to use its self-signed CA to sign those certificates.
Ask the managing organization to use its self-signed CA to sign those four certificates.
They should send you:
* Signed versions of your four certificates.
* One ``ca.crt`` file: their CA certificate.
* One ``crl.pem`` file: a certificate revocation list.
For help, see the pages: