From 4c8ca40889a1df5e1ecb5fd01ae48b31ea3fe9b7 Mon Sep 17 00:00:00 2001 From: Christian Poessinger Date: Sun, 18 Jul 2021 12:26:36 +0200 Subject: pki: initial chapter added --- docs/configuration/pki/index.rst | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 docs/configuration/pki/index.rst (limited to 'docs/configuration/pki') diff --git a/docs/configuration/pki/index.rst b/docs/configuration/pki/index.rst new file mode 100644 index 00000000..7c0044e1 --- /dev/null +++ b/docs/configuration/pki/index.rst @@ -0,0 +1,20 @@ +lastproofread: 1970-01-01 + +.. include:: /_include/need_improvement.txt + +### +PKI +### + +VyOS 1.4 changed the way in how encrytions keys/certificates are stored on the +running system. In the pre VyOS 1.4 era, certificates got stored under /config +ans every service referenced a file. That made copying a running configuration +from system A to system B a bit harder, as you had to copy the files and their +permissions by hand. + +VyOS 1.4 comes with a new approach where the keys are stored on the CLI and are +simply referenced by their name. + +Don't be afraid that you need to re-do your configuration. Key transformation is +handled, as always, by our migration scripts, so this will be a smooth transition +for you! -- cgit v1.2.3