Exporting CSR Files

Export CSR files of host nodes (agent1, agent2, and agent3) to the CA server.

/home/omm/haf-install/haf-host/tools/haf-tool cert --server ca_server_ip --path ca_server_path --user ca_server_user --export

[root@agent3]# /home/omm/haf-install/haf-host/tools/haf-tool cert --server xx.xx.xx.xx --path /home/ca_server/ --user root --export
please enter passwd:
[transfer csr Success]

Check whether CSR files of host nodes exist in the remote certificate issuing path.

[root@ca_server]# ll /home/ca_server/
total 48K
-rw------- 1 root root 1.5K Nov 17 16:26 8446fe73b2bbhost.csr
-rw-r--r-- 1 root root  828 Nov 17 16:14 ca.crl
-rw-r--r-- 1 root root 1.7K Nov 17 10:24 ca.crt
-rw------- 1 root root 2.5K Nov 17 10:24 ca.key
drwxr-xr-x 5 root root 4.0K Nov 17 16:14 demoCA
-rw-r--r-- 1 root root  11K Nov 17 10:23 openssl.cnf

The script parameters are described as follows:

• ca_server_ip: IP address of the CA server for issuing certificates.
• ca_server_path: Certificate issuing path of the CA server.
• ca_server_user: User name for logging in to the CA server for issuing certificates.