From e654cc2278b018a90bf0acb04b4c97a13c6fef48 Mon Sep 17 00:00:00 2001 From: Tim Pepper Date: Mon, 1 Aug 2016 14:04:56 -0700 Subject: [PATCH] ciao: freshen documentation on certificate authorities We removed a section on adding certificates to your browser, yet we do need info on adding a certificate to the system CA trust. But this varies with each linux distribution. It's complicated and authoritative information on the topic is out there in web, so give minimal information to help a reasonable system administrator on their way. Signed-off-by: Tim Pepper --- source/ciao-cluster-setup.rst | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/source/ciao-cluster-setup.rst b/source/ciao-cluster-setup.rst index 345112a7..ce62206c 100644 --- a/source/ciao-cluster-setup.rst +++ b/source/ciao-cluster-setup.rst @@ -142,8 +142,11 @@ Copy the ``controller_cert.pem`` and ``controller_key.pem`` files to your controller node. You can use the same location where you will be storing your controller binary (``ciao-controller``). -You'll also need to pull that certificate into your browser as noted below in -the `Starting a workload` section. +You'll also need to pull that controller certificate into system +CA trust. The specifics of how to do this vary by linux distribution +(eg: ``update-ca-certificates``, ``update-ca-trust``, and ``trust`` +are examples of tools for this purpose on Ubuntu, Fedora and ClearLinux +respectively). Keystone node ------------- @@ -544,4 +547,4 @@ testing. .. _CNCI Agent: https://github.com/01org/ciao/tree/master/networking/cnci_agent .. _mailing list: https://lists.clearlinux.org/mailman/listinfo/ciao-devel .. _ciao-cli: https://github.com/01org/ciao/tree/master/ciao-cli -.. _ciao-webui: https://github.com/01org/ciao-webui \ No newline at end of file +.. _ciao-webui: https://github.com/01org/ciao-webui