F21 Self Contained Change: Remote Journal Logging
abokovoy at redhat.com
Mon Apr 14 15:58:36 UTC 2014
On Mon, 14 Apr 2014, Zbigniew Jędrzejewski-Szmek wrote:
>On Mon, Apr 14, 2014 at 05:19:17PM +0300, Alexander Bokovoy wrote:
>> How certificates are managed for sender and receiver parts?
>By some external means... This could be automated, e.g. using
>certmaster, but I don't want to tie to a specific certificate
Ok. I was worried you'll do the opposite. ;)
>> Who generates them? Do you require explicit placement of the
>> certificates prior to enabling the service?
>Yes. I want to push towards having the certificates in place in the
>default location, although it is of course possible to specify an alternate
>location through the config file, or even turn off certificate checking,
>but the defaults are supposed to be secure.
/ Alexander Bokovoy
More information about the devel