Documentation
Rate This Document
Findability
Accuracy
Completeness
Readability
SubmitClose

Importing Certificates

Import certificates issued by the CA server to offload nodes (ceph1, ceph2, and ceph3).

echo password | su -s /bin/bash - haf -c "haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --import --offload"
[root@agent3]# su -s /bin/bash - haf -c "haf-tool cert --server xx.xx.xx.xx --path /home/ca_server/  --user root --import --offload"
please enter passwd:
[transfer ca.crt Success]
[verify ca.crt Success]
SHA1 Fingerprint=D9:16:7C:E2:86:D0:EB:51:DF:F4:BA:CF:9E:A3:60:38:D0:23:F7:58
[transfer daemon crt Success]
[verify daemon crt Success]
[transfer haf_user crt Success]
[verify executor crt Success]
Check whether new service.crt files exist in /opt/haf-target/run/haf_user/ and /opt/haf-target/run/daemon/.

The script parameters are described as follows:

  • ca_server_ip: IP address of the CA server for issuing certificates.
  • ca_server_path: Certificate issuing path of the CA server.
  • ca_server_user: User name for logging in to the CA server for issuing certificates.
  • During certificate import, the CA certificate of the remote CA server is also imported.