summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorChristian Poessinger <christian@poessinger.com>2021-07-18 12:26:36 +0200
committerChristian Poessinger <christian@poessinger.com>2021-07-18 12:26:44 +0200
commit4c8ca40889a1df5e1ecb5fd01ae48b31ea3fe9b7 (patch)
tree81bd6815ea85fa26e182dae1df0962924f01fffd
parent1197661286fff26dfbed2c90c53ba97d2e7eb304 (diff)
downloadvyos-documentation-4c8ca40889a1df5e1ecb5fd01ae48b31ea3fe9b7.tar.gz
vyos-documentation-4c8ca40889a1df5e1ecb5fd01ae48b31ea3fe9b7.zip
pki: initial chapter added
-rw-r--r--docs/configuration/index.rst1
-rw-r--r--docs/configuration/pki/index.rst20
2 files changed, 21 insertions, 0 deletions
diff --git a/docs/configuration/index.rst b/docs/configuration/index.rst
index 0fe481da..35b6fa5b 100644
--- a/docs/configuration/index.rst
+++ b/docs/configuration/index.rst
@@ -15,6 +15,7 @@ The following structure respresent the cli structure.
loadbalancing/index
nat/index
policy/index
+ pki/index
protocols/index
service/index
system/index
diff --git a/docs/configuration/pki/index.rst b/docs/configuration/pki/index.rst
new file mode 100644
index 00000000..7c0044e1
--- /dev/null
+++ b/docs/configuration/pki/index.rst
@@ -0,0 +1,20 @@
+lastproofread: 1970-01-01
+
+.. include:: /_include/need_improvement.txt
+
+###
+PKI
+###
+
+VyOS 1.4 changed the way in how encrytions keys/certificates are stored on the
+running system. In the pre VyOS 1.4 era, certificates got stored under /config
+ans every service referenced a file. That made copying a running configuration
+from system A to system B a bit harder, as you had to copy the files and their
+permissions by hand.
+
+VyOS 1.4 comes with a new approach where the keys are stored on the CLI and are
+simply referenced by their name.
+
+Don't be afraid that you need to re-do your configuration. Key transformation is
+handled, as always, by our migration scripts, so this will be a smooth transition
+for you!