Exporting CSR Files

Export CSR files to the CA server.

[root@agent3]# /home/omm/haf-install/haf-target/tools/haf-tool cert --server xx.xx.xx.xx --path /home/ca_server/ --user root --export
please enter passwd:
[transfer csr Success]

For example, after the preceding steps are performed for an offload node, the CSR file of the offload node is transferred to the corresponding issuing path on the remote CA server. The prefix is the MAC address of the exported CSR file.

To obtain the MAC address, run ifconfig | grep ether | awk 'NR==1' | awk '{print $2}'. An example command output is 68:4x:xx:xx:xx:aa, and the character string after the colons (:) are deleted is the MAC address.

[root@agent3]# ll /home/ca_server/
total 32K
-rw------- 1 root root 1.5K Nov 17 09:07 8446fe73b2bbtarget.csr
-rw-r--r-- 1 root root 1.7K Nov 17 10:24 ca.crt
-rw------- 1 root root 2.5K Nov 17 10:24 ca.key
drwxr-xr-x 5 root root 4.0K Nov 17 15:32 demoCA
-rw-r--r-- 1 root root  11K Nov 17 10:23 openssl.cnf

• haf-dir indicates the installation directory.
  • If haf-dir is set to haf-host, it indicates the host node.
  • If haf-dir is set to haf-target, it indicates the service installation on the offload node.
  • If haf-dir is set to haf-offload, it indicates the library installation on the offload node.
• The script parameters are described as follows:
  • ca_server_ip: IP address of the CA server for issuing certificates.
  • ca_server_path: Certificate issuing path of the CA server.
  • ca_server_user: User name for logging in to the CA server for issuing certificates.