diff options
| author | Russ Allbery <rra@stanford.edu> | 2013-02-03 21:40:12 -0800 |
|---|---|---|
| committer | Russ Allbery <rra@stanford.edu> | 2013-02-05 20:21:08 -0800 |
| commit | f806961bf9e6be8e07f2e304a3aa9906add2aad6 (patch) | |
| tree | aee129d35507f746ec3297e70fc38601cd3ac9e9 /docs | |
| parent | bf18b39b6afe541e6888d32d6a555643cbe9d22e (diff) | |
Add another case to the Stanford ssl-key naming convention
If there are multiple SSL private keys for the same host-based CN,
an application name can be added as an additional component of the
name.
Change-Id: I06e25359b291a77a7dbca1a7f3db84afb2b16ddd
Reviewed-on: https://gerrit.stanford.edu/754
Reviewed-by: Russ Allbery <rra@stanford.edu>
Tested-by: Russ Allbery <rra@stanford.edu>
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/stanford-naming | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/docs/stanford-naming b/docs/stanford-naming index f88d148..aa59f68 100644 --- a/docs/stanford-naming +++ b/docs/stanford-naming @@ -119,7 +119,7 @@ Object Naming (OLD: <group>-<server>-ssh-<type>) - ssl-key/<server> + ssl-key/<server>[/<application>] Stores the SSL X.509 certificate private key for <server>. Used for Apache, Postfix, LDAP, and similar cases where the certificate @@ -130,6 +130,12 @@ Object Naming virtual hosts, for example, or because the certificate is for a load-balanced name). + An optional <application> component may be added if there are + multiple certificates with the same host name as the CN but with + different private keys. (This may happen if, for example, + multiple services are running on the same FQDN but should have + isolated security contexts.) + Use ssl-key/starYYYY.stanford.edu for the key for the *.stanford.edu certificate, where YYYY is the expiration year. |