From e6c27bbdc26dc2708c998a7c323fcb42fda53149 Mon Sep 17 00:00:00 2001 From: Tim Pepper Date: Wed, 3 Aug 2016 14:19:54 -0700 Subject: [PATCH] ciao: simplify CA setup docu for ClearLinux ClearLinux has simplified their mechanism for CA trust. This nicely trims a lot of complexity from our ciao documentation. Signed-off-by: Tim Pepper --- source/ciao-cluster-setup.rst | 13 +++---------- 1 file changed, 3 insertions(+), 10 deletions(-) diff --git a/source/ciao-cluster-setup.rst b/source/ciao-cluster-setup.rst index a22b47c0..d5ec556e 100644 --- a/source/ciao-cluster-setup.rst +++ b/source/ciao-cluster-setup.rst @@ -329,16 +329,9 @@ this certificate needs to be installed in the control node and be part of the control node CA root. On Clear Linux OS for Intel Architecture, this is accomplished with:: - $ sudo mkdir /etc/ca-certs - $ sudo cp cacert.pem /etc/ca-certs - $ sudo c_hash /etc/ca-certs/cacert.pem - -Note the generated hash from the prior command and use it in the next commands:: - - $ sudo ln -s /etc/ca-certs/cacert.pem /etc/ca-certs/ - $ sudo mkdir /etc/ssl - $ sudo ln -s /etc/ca-certs/ /etc/ssl/certs - $ sudo ln -s /etc/ca-certs/cacert.pem /usr/share/ca-certs/ + $ sudo mkdir /etc/ssl/certs + $ sudo cp cacert.pem /etc/ssl/certs + $ sudo trust-certs You will need to tell the controller where the keystone service is located and pass the ciao service username and password to it. DO NOT USE