Skip to content

Commit

Permalink
doc: fixup certificate copying in deploy tutorial
Browse files Browse the repository at this point in the history
Fix copying of certificates to individual hosts in the "freestanding
deployment" tutorial.
Was suggesting to copy all certificates to `/etc/scion/crypto/`.
Instead, it should copy the AS certificates to `/etc/scion/crypto/as/`.

Originally the instructions had been correct; the problem was introduced
with the custom script to generate the crypto material. This script uses
flatter paths (for brevity) than the originally used `scion-pki testcrypto`
tool, and the copy instruction were not correctly updated (and not tested, duh).
  • Loading branch information
matzf committed Feb 20, 2024
1 parent 7bb1ff4 commit 1fc0d5d
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions doc/tutorials/deploy.rst
Original file line number Diff line number Diff line change
Expand Up @@ -255,8 +255,8 @@ In practice, the private keys of ASes are of course never revealed to other enti
cd /tmp/tutorial-scion-certs
for i in {1..5}
do
ssh scion0$i 'mkdir -p /etc/scion/{crypto,certs}'
scp ASS$i/* scion0$i:/etc/scion/crypto/
ssh scion0$i 'mkdir -p /etc/scion/{crypto/as,certs}'
scp AS$i/cp-as.{key,pem} scion0$i:/etc/scion/crypto/as/
scp ISD42-B1-S1.trc scion0$i:/etc/scion/certs/
done
Expand Down

0 comments on commit 1fc0d5d

Please sign in to comment.