1
1
THE MULTIROOTCA PROGRAM
2
2
3
- The multirootca program is a authenticated-signer-only server that is
3
+ The multirootca program is an authenticated-signer-only server that is
4
4
intended to be used as a remote server for cfssl instances. The
5
5
scenario it was originally intended for is
6
6
@@ -9,7 +9,7 @@ scenario it was originally intended for is
9
9
issuing certificates.
10
10
11
11
The multirootca configuration file is an ini-style configuration file;
12
- an example is found in `cmd/ multirootca/config/testdata/roots_whitelist.conf `.
12
+ various examples can be found in `multirootca/config/testdata`.
13
13
14
14
[ primary ]
15
15
private = file://testdata/server.key
@@ -21,6 +21,7 @@ an example is found in `cmd/multirootca/config/testdata/roots_whitelist.conf`.
21
21
private = file://testdata/server.key
22
22
certificate = testdata/server.crt
23
23
config = testdata/config.json
24
+ dbconfig = testdata/db-config.json
24
25
25
26
This defines two signers, labelled "primary" and "backup". These are
26
27
both using the same key, but in practice these keys will be
@@ -30,7 +31,9 @@ points to a cfssl configuration file to use for each signer; the
30
31
format of this file is described in "cfssl.txt". Optionally, a nets
31
32
entry points to a comma-separated list of networks that should be
32
33
permitted access to the signer. This list forms a whitelist; if it's
33
- not present, all networks are whitelisted for that signer.
34
+ not present, all networks are whitelisted for that signer. A dbconfig
35
+ entry points to a certdb configuration file containing database
36
+ connection details, see `certdb/README.md`.
34
37
35
38
SPECIFYING A PRIVATE KEY
36
39
0 commit comments