11THE MULTIROOTCA PROGRAM
22
3- The multirootca program is a authenticated-signer-only server that is
3+ The multirootca program is an authenticated-signer-only server that is
44intended to be used as a remote server for cfssl instances. The
55scenario it was originally intended for is
66
@@ -9,7 +9,7 @@ scenario it was originally intended for is
99 issuing certificates.
1010
1111The multirootca configuration file is an ini-style configuration file;
12- an example is found in `cmd/ multirootca/config/testdata/roots_whitelist.conf `.
12+ various examples can be found in `multirootca/config/testdata`.
1313
1414 [ primary ]
1515 private = file://testdata/server.key
@@ -21,6 +21,7 @@ an example is found in `cmd/multirootca/config/testdata/roots_whitelist.conf`.
2121 private = file://testdata/server.key
2222 certificate = testdata/server.crt
2323 config = testdata/config.json
24+ dbconfig = testdata/db-config.json
2425
2526This defines two signers, labelled "primary" and "backup". These are
2627both using the same key, but in practice these keys will be
@@ -30,7 +31,9 @@ points to a cfssl configuration file to use for each signer; the
3031format of this file is described in "cfssl.txt". Optionally, a nets
3132entry points to a comma-separated list of networks that should be
3233permitted access to the signer. This list forms a whitelist; if it's
33- not present, all networks are whitelisted for that signer.
34+ not present, all networks are whitelisted for that signer. A dbconfig
35+ entry points to a certdb configuration file containing database
36+ connection details, see `certdb/README.md`.
3437
3538SPECIFYING A PRIVATE KEY
3639
0 commit comments