Updated documentation to reflect new behaviour of test certificate script.
authorJohn White <John.White@cern.ch>
Thu, 3 Mar 2005 10:26:22 +0000 (10:26 +0000)
committerJohn White <John.White@cern.ch>
Thu, 3 Mar 2005 10:26:22 +0000 (10:26 +0000)
doc/README

index 01fdbb0..42e6d21 100644 (file)
@@ -36,20 +36,21 @@ For normal components just execute
 It will generate certificates in a CA specific directory, but also
 copy it to a structure, which is closer to component configurations:
 
-    share/test/certificates/
-                grid-security/
-                    hostcert.pem
-                    hostkey.pem
-                    certificates/
-                        5a762d74.0
-                        5a762d74.r0
-                home/
-                    usercert.pem
-                    userkey.pem
+    $WORKSPACE/stage/
+                     grid-security/
+                                   hostcert.pem
+                                   hostkey.pem
+                                   certificates/
+                                                5a762d74.0
+                                                5a762d74.r0
+                                                5a762d74.signing_policy
+                     home/
+                          usercert.pem
+                          userkey.pem
 
 All Certificates
 ----------------
-For security components a more extensice set of certificates can be
+For security components a more extensive set of certificates can be
 generated with the following command
 
     generate-test-certificates.sh --all $WORKSPACE/stage
@@ -57,3 +58,11 @@ generated with the following command
 It will generate many certificates in CA specific directories, but
 not put them to the above mentioned convenient places.
 
+This command will also put the CA cert and signing policy for EACH CA except for the
+'fake' CA into:
+
+    $WORKSPACE/stage/
+                     grid-security/
+                                   certificates/
+                                                <CA hash>.0
+                                                <CA hash>.signing_policy