openca distributed deploy

install-ca

install-common is only interesting for package maintainers because they can install the common stuff

seperately from the rest.

install-ext is the same like install online. This install target is deprecated.

install-ldap

install-node

install-offline installs ca and node

install-online installs ra, ldap, pub, scep and node

install-pub

install-ra

install-scep

install-docs


========

CA+RA on one server

PUB+SCEP on another server

configure.xml need to modify.

       <!-- there are several templates available today                    -->

       <!--   0. no dataexchange configure - the default                   -->

       <!--        this makes only sense for an all in one box             -->

       <!--        it is strongly recommended to use this only for testing -->

       <!--   1. the node acts as CA only                                  -->

       <!--        the node exports to one or several RAs only             -->

       <!--        the node can export to LDAP too                         -->

       <!--   2. the node acts as RA only                                  -->

       <!--        the node exchange data with a CA and public/scep        -->

       <!--        the node can act as LDAP too                            -->

       <!--        the node can export to LDAP too                         -->

       <!--   3. the node acts as public/scep only                         -->

       <!--        the node exchange data with a RA                        -->

       <!--   4. the node acts as LDAP only                                -->

       <!--        the node receives data from CA or RA                    -->

       <!--   5. the node acts as public/scep and RA                       -->

       <!--        the node echanges data with a CA only                   -->

       <!--        no support for dataexchange with additional LDAP        -->

       <!--   6. the node acts as RA and CA                                -->

       <!--        the node exchange data with public/scep                 -->

       <!--        the node can export to LDAP too                         -->

       <!--                                                                -->

       <!--   LDAP is only relevant if it is the only protocol on the node -->


to be continued...


The test has been done at 09/12/2013...

It can works with cisco/h3c router.

發表評論
所有評論
還沒有人評論,想成為第一個評論的人麼? 請在上方評論欄輸入並且點擊發布.
相關文章