F21 Self Contained Change: Remote Journal Logging

[Zbigniew Jędrzejewski-Szmek]

On Mon, Apr 14, 2014 at 05:19:17PM +0300, Alexander Bokovoy wrote:
> How certificates are managed for sender and receiver parts?
By some external means... This could be automated, e.g. using
certmaster, but I don't want to tie to a specific certificate
distribution implementation.

> Who generates them? Do you require explicit placement of the
> certificates prior to enabling the service?
Yes. I want to push towards having the certificates in place in the
default location, although it is of course possible to specify an alternate
location through the config file, or even turn off certificate checking,
but the defaults are supposed to be secure.

Zbyszek