letsencrypt
/
boulder
mirror of https://github.com/letsencrypt/boulder.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update ceremony documentation. (#4867) 

Replace issuer-path with issuer-certificate-path, and fix a typo.
This commit is contained in:
Jacob Hoffman-Andrews 2020-06-15 09:14:15 -07:00 committed by GitHub
parent 0b0917cea6
commit 20031f9796
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
cmd/ceremony/README.md
View File

@ -84,7 +84,7 @@ This config generates a ECDSA P-384 key in the HSM with the object label `root s
| Field | Description | | Field | Description |
| --- | --- | | --- | --- |
| `public-key-path` | Path to PEM subject public key for certificate. | | `public-key-path` | Path to PEM subject public key for certificate. |
| `issuer-path` | Path to PEM issuer certificate. | | `issuer-certificate-path` | Path to PEM issuer certificate. |
- `outputs`: object containing paths to write outputs. - `outputs`: object containing paths to write outputs.
| Field | Description | | Field | Description |
| --- | --- | | --- | --- |
@ -102,7 +102,7 @@ pkcs11:
signing-key-id: ffff signing-key-id: ffff
inputs: inputs:
public-key-path: /home/user/intermediate-signing-pub.pem public-key-path: /home/user/intermediate-signing-pub.pem
issuer-path: /home/user/root-cert.pem issuer-certificate-path: /home/user/root-cert.pem
outputs: outputs:
certificate-path: /home/user/intermediate-cert.pem certificate-path: /home/user/intermediate-cert.pem
certificate-profile: certificate-profile:
@ -142,7 +142,7 @@ This config generates an intermediate certificate signed by a key in the HSM, id
| Field | Description | | Field | Description |
| --- | --- | | --- | --- |
| `public-key-path` | Path to PEM subject public key for certificate. | | `public-key-path` | Path to PEM subject public key for certificate. |
| `issuer-path` | Path to PEM issuer certificate. | | `issuer-certificate-path` | Path to PEM issuer certificate. |
- `outputs`: object containing paths to write outputs. - `outputs`: object containing paths to write outputs.
| Field | Description | | Field | Description |
| --- | --- | | --- | --- |
@ -162,7 +162,7 @@ pkcs11:
signing-key-id: ffff signing-key-id: ffff
inputs: inputs:
public-key-path: /home/user/ocsp-signer-signing-pub.pem public-key-path: /home/user/ocsp-signer-signing-pub.pem
issuer-path: /home/user/intermediate-cert.pem issuer-certificate-path: /home/user/intermediate-cert.pem
outputs: outputs:
certificate-path: /home/user/ocsp-signer-cert.pem certificate-path: /home/user/ocsp-signer-cert.pem
certificate-profile: certificate-profile:
@ -175,7 +175,7 @@ certificate-profile:
issuer-url: http://good-guys.com/root issuer-url: http://good-guys.com/root
``` ```
This config generates a delegated OCSP signing certificate signed by a key in the HSM, identified by the object label `intermediate signing key` and the object ID `ffff`. The subject key used is taken from `/home/user/ocsp-signer-signing-pub.pem` and the issuer is `/home/user/intermdiate-cert.pem`, the resulting certificate is written to `/home/user/ocsp-signer-cert.pem`. This config generates a delegated OCSP signing certificate signed by a key in the HSM, identified by the object label `intermediate signing key` and the object ID `ffff`. The subject key used is taken from `/home/user/ocsp-signer-signing-pub.pem` and the issuer is `/home/user/intermediate-cert.pem`, the resulting certificate is written to `/home/user/ocsp-signer-cert.pem`.
### Key ceremony ### Key ceremony