Bacula-users

Re: [Bacula-users] need help (step by step) for setting up certificates

2011-07-23 17:04:08
Subject: Re: [Bacula-users] need help (step by step) for setting up certificates
From: Ben Walton <bwalton AT artsci.utoronto DOT ca>
To: bacula-users <bacula-users AT lists.sourceforge DOT net>
Date: Sat, 23 Jul 2011 17:01:27 -0400
Excerpts from scar's message of Sat Jul 23 15:56:53 -0400 2011:

> i think what is confusing me the most is what to use for CN, but i
> am generally puzzled as to how to generate the certs properly in
> general.  i've got TinyCA installed and i created a CA, what's next?

Generally speaking, the CN field should be the fully qualified
hostname of your system.  For a case where you're doing dir and sd on
the same system, you'd have two certs with the same CN value.

I found the following guide useful in setting up a local CA:
http://www.g-loaded.eu/2005/11/10/be-your-own-ca/

I've opted for a two tier CA though and if you're interested in that
level of effort (overkill possibly), I'll share another guide I found
handy.

Thanks
-Ben
--
Ben Walton
Systems Programmer - CHASS
University of Toronto
C:416.407.5610 | W:416.978.4302


------------------------------------------------------------------------------
Storage Efficiency Calculator
This modeling tool is based on patent-pending intellectual property that
has been used successfully in hundreds of IBM storage optimization engage-
ments, worldwide.  Store less, Store more with what you own, Move data to 
the right place. Try It Now! http://www.accelacomm.com/jaw/sfnl/114/51427378/
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users