1COROSYNC-QDEVICE-NET-CERTUTILS(y8s)tem Manager's MaCnOuRaOlSYNC-QDEVICE-NET-CERTUTIL(8)
2
3
4

NAME

6       corosync-qdevice-net-certutil  - tool to generate qdevice model net TLS
7       certificates
8

SYNOPSIS

10       corosync-qdevice-net-certutil [-i|-m|-M|-r|-s|-Q] [-c certificate]  [-n
11       cluster_name]
12

DESCRIPTION

14       corosync-qdevice-net-certutil  is  a frontend for NSS certutil used for
15       generating client certificate for the net model of qdevice.
16

OPTIONS

18       -i     Initialize  the  QDevice  Net  NSS  certificate  database.   The
19              default   directory   for  the  database  is  /etc/corosync/qde‐
20              vice/net/. This directory has to  be  writable  by  the  current
21              user. It needs the QNetd CA certificate passed as the -c parame‐
22              ter. This certificate can be found on the server  running  QNetd
23              in the file /etc/corosync/qnetd/nssdb/qnetd-cacert.crt.
24
25       -m     Import the cluster certificate and key from a pk12 file.
26
27       -r     Generate  a  certificate  request.  The  certificate  request is
28              exported into /etc/corosync/qdevice/net/qdevice-net-node.crq. It
29              is  necessary  to  pass the cluster name using the -n parameter.
30              The  cluster  name   has   to   match   the   one   defined   in
31              /etc/corosync/corosync.conf.
32
33       -M     Import  a  signed certificate and export a certificate with pri‐
34              vate key into pk12 file.
35
36       -Q     Use ssh/scp to properly set both  corosync-qnetd  and  corosync-
37              qdevice  certificates on all nodes. It's highly recommended that
38              you use an ssh agent, or ssh/scp will keep asking for a password
39              - roughly 8 times the number of nodes.
40
41       -c     File with certificate to load.
42
43       -n     Name of the cluster.
44

SEE ALSO

46       corosync-qnetd(8) corosync-qdevice(8)
47

AUTHOR

49       Jan Friesse
50
51                                  2016-06-28  COROSYNC-QDEVICE-NET-CERTUTIL(8)