Skip to content

Commit

Permalink
doc: fixup certificate copying in deploy tutorial (#4467)
Browse files Browse the repository at this point in the history
Fix copying of certificates to individual hosts in the "freestanding
deployment" tutorial.
Was suggesting to copy all certificates to `/etc/scion/crypto/`.
Instead, it should copy the AS certificates to `/etc/scion/crypto/as/`.

Originally the instructions had been correct; the problem was introduced
with the custom script to generate the crypto material. This script uses
flatter paths (for brevity) than the originally used `scion-pki
testcrypto` tool, and the copy instruction were not correctly updated
(and not tested, duh).
  • Loading branch information
matzf authored Feb 20, 2024
1 parent 7bb1ff4 commit 77e8188
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions doc/tutorials/deploy.rst
Original file line number Diff line number Diff line change
Expand Up @@ -255,8 +255,8 @@ In practice, the private keys of ASes are of course never revealed to other enti
cd /tmp/tutorial-scion-certs
for i in {1..5}
do
ssh scion0$i 'mkdir -p /etc/scion/{crypto,certs}'
scp ASS$i/* scion0$i:/etc/scion/crypto/
ssh scion0$i 'mkdir -p /etc/scion/{crypto/as,certs}'
scp AS$i/cp-as.{key,pem} scion0$i:/etc/scion/crypto/as/
scp ISD42-B1-S1.trc scion0$i:/etc/scion/certs/
done
Expand Down

0 comments on commit 77e8188

Please sign in to comment.