openca distributed deploy
install-ca
install-common is only interesting for package maintainers because they can install the common stuff
seperately from the rest.
install-ext is the same like install online. This install target is deprecated.
install-ldap
install-node
install-offline installs ca and node
install-online installs ra, ldap, pub, scep and node
install-pub
install-ra
install-scep
install-docs
========
CA+RA on one server
PUB+SCEP on another server
configure.xml need to modify.
<!-- there are several templates available today -->
<!-- 0. no dataexchange configure - the default -->
<!-- this makes only sense for an all in one box -->
<!-- it is strongly recommended to use this only for testing -->
<!-- 1. the node acts as CA only -->
<!-- the node exports to one or several RAs only -->
<!-- the node can export to LDAP too -->
<!-- 2. the node acts as RA only -->
<!-- the node exchange data with a CA and public/scep -->
<!-- the node can act as LDAP too -->
<!-- the node can export to LDAP too -->
<!-- 3. the node acts as public/scep only -->
<!-- the node exchange data with a RA -->
<!-- 4. the node acts as LDAP only -->
<!-- the node receives data from CA or RA -->
<!-- 5. the node acts as public/scep and RA -->
<!-- the node echanges data with a CA only -->
<!-- no support for dataexchange with additional LDAP -->
<!-- 6. the node acts as RA and CA -->
<!-- the node exchange data with public/scep -->
<!-- the node can export to LDAP too -->
<!-- -->
<!-- LDAP is only relevant if it is the only protocol on the node -->
to be continued...
The test has been done at 09/12/2013...
It can works with cisco/h3c router.
本文出自 “mininer” 博客，谢绝转载！