Changes between Version 106 and Version 107 of flukes

Show
Ignore:
Timestamp:
06/24/13 09:31:07 (6 years ago)
Author:
ibaldin (IP: 152.54.9.21)
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • flukes

    v106 v107  
    239239 
    240240There are two ways in which these credentials can be used. The first is simpler, and the second is more flexible. The first way is most familiar to users coming from Emulab/Planetlab/InstaGENI Flack environment, and involves using a single identity credential supplied in the form of a combination of .key and .pem/.crt files. Flukes accepts these types of credentials, but if multiple identities need to be used, Flukes must be stopped, reconfigured and restarted. The second way relies on constructing a Java Key Store (JKS) out of one or more credentials issued to the experimenter (multiple identity credentials). Flukes can then use this keystore and the experimenter can choose which identity to use at run time. 
     241 
     242Note that to preserve original behavior, Flukes favors the second way, that is if you already have your identity specified in a JKS, using the .pem/.key files will have no effect until you comment out the JKS setting. 
    241243 
    242244Before we describe either, a quick note regarding the storage of the various files (.key, .pem, .p12, .jks) referenced in these procedures: since these files represent secrets belonging to you, it is best to store them in a single directory (e.g. $HOME/.ssl) that only you are allowed to read and write.