From: Jude N Date: Sat, 28 Mar 2015 14:44:24 +0000 (-0400) Subject: (messing with READE.md markdown) X-Git-Tag: v0.29~6 X-Git-Url: https://pwan.org/git/?p=certmaster.git;a=commitdiff_plain;h=e97b9486cade4231eb35343738667e9eac458a62 (messing with READE.md markdown) --- diff --git a/README.md b/README.md index cc9d05a..2e8f0e4 100644 --- a/README.md +++ b/README.md @@ -4,13 +4,13 @@ read more at: [Fedora Project Page](https://fedorahosted.org/certmaster/) -[Fedora Repo] (http://git.fedorahosted.org/git/?p=certmaster.git;a=summary) +[Fedora Repo](http://git.fedorahosted.org/git/?p=certmaster.git;a=summary) --- -** About this fork +## About this fork -*** Multiple CA support +### Multiple CA support This certmaster fork introduces a new '--ca' argument for specifying an alternative certificate authority. @@ -23,30 +23,26 @@ should be able to upgrade your existing certmaster to this version, and it will If you want to add an additional certificate authorities, add a section to your certmaster.conf file as per below for each CA, using a different name and set of directories for each CA. -``` -[ca:name] -autosign = yes_or_no -cadir = /path/to/cadir -cert_dir = /path/to/cert_dir -certroot = /path/to/certroot -csrroot = /path/to/csrroot -``` + [ca:name] + autosign = yes_or_no + cadir = /path/to/cadir + cert_dir = /path/to/cert_dir + certroot = /path/to/certroot + csrroot = /path/to/csrroot Then to use the new CA, include the argument '--ca=name' in your list of certmaster-ca arguments to use the 'name' CA. Likewise, when requesting certs from the new CA, include a section of the following form in your minion.conf file: -``` -[ca:name] -cert_dir = /path/to/cert_dir -``` + + [ca:name] + cert_dir = /path/to/cert_dir Then include the argument '--ca=name' in your certmaster-request commands to request a cert from the 'name' CA. If the '--ca' argument is not given in the certmaster-ca or certmaster-request commands, then the original autosign, cadir, cert_dir, certroot, and csrroot options from the main section of certmaster.conf / minion.conf are used instead. -*** Misc Changes - +### Misc Changes + 'certmaster-ca --version' reads /etc/certmaste/version instead of func's version file + certmaster-sync doesn't error out if func if not present