e524b60f24
docs(transport/tls): improve EasyRSA instructions ( #907 )
...
**Problem 1**: Users following the EasyRSA script in the docs with their
more recent distro version of EasyRSA find that the generated certs no
longer include a subject-alternative-name (SAN), which is required as of
Go 1.15 / zrepl 0.3.0.
**Problem 2**: Newer openssl versions with the old EasyRSA prompt the
user for a CA password in `init-pki` and depending on EasyRSA version
there are other interactive prompts at later commands in the script.
**Changes**:
- upgrade the pinned EasyRSA version to the latest release
- use `--auto-san` option to make EasyRSA set the SAN. This has the
benefit of also working for IP addresses.
I checked the easy-rsa git history and `--subject-alt-name` appears to
have been present in all 3.X releases, so, adding the flag shouldn't
break users of older EasyRSA 3.X.
(And these are exemplary instructions anyway.)
refs
- fixes https://github.com/zrepl/zrepl/issues/900
- obsoletes https://github.com/zrepl/zrepl/pull/906
- obsoletes https://github.com/zrepl/zrepl/pull/877
Co-authored-by: Andrew Lorimer <andrew@lorimer.id.au >
2026-01-18 13:48:49 +01:00
7f1695c457
docs: transport: fix easyrsa script (fixup of 6b4c6fc)
2020-08-23 20:36:43 +02:00
6b4c6fc062
[ #357 ] docs: update quickstart + tls transport to produce keypairs with subject alternative names
...
fixes #357
2020-08-22 03:05:30 +02:00
2fbd9d8f8c
transport/tcp: support for CIDR-mask based ACLs + client-identities
...
Co-authored-by: Christian Schwarz <me@cschwarz.com >
fixes #235
close #265
2020-05-15 21:17:01 +02:00
d35e2400b2
transport/{TCP,TLS}: optional IP_FREEBIND / IP_BINDANY bind socketops
...
Allows to bind to an address even if it is not actually (yet or ever)
configured. Fixes #238
Rationale:
https://www.freedesktop.org/wiki/Software/systemd/NetworkTarget/#whatdoesthismeanformeadeveloper
2020-01-04 17:21:48 +01:00
7e743c74dc
docs + samples: adjust ssh 'Compression' arg in examples
2019-11-20 18:19:16 +01:00
d2bc40f78d
docs: transports: ssh: better copy-pastable connect section
2019-11-16 22:07:47 +01:00
5c95c21727
transport/local: configurable dial_timeout for connect, default 2s
2019-09-29 19:05:54 +02:00
a7993d18c6
transport/tls: clarify docs & error message language
2019-03-15 17:17:25 +01:00
5595cff6a6
Merge branch 'master' into fix_peer_cert_chains
2019-03-15 16:34:21 +01:00
796c5ad42d
rpc rewrite: control RPCs using gRPC + separate RPC for data transfer
...
transport/ssh: update go-netssh to new version
=> supports CloseWrite and Deadlines
=> build: require Go 1.11 (netssh requires it)
2019-03-13 13:53:48 +01:00
f724480c7b
Add documentation regarding using a certificate chain
2019-01-22 10:09:24 -08:00
7e1c5f5d1f
docs: discourage use of ssh+stdinserver transport due to inferior error handling
2018-10-22 11:25:16 +02:00
a62b475f46
docs/transport/tls: document self-signed certs procedure for 2-machine setup
2018-10-21 22:20:07 +02:00
1643198713
docs: reflect changes in replication_rewrite branch
2018-10-11 18:03:18 +02:00
9b803aad2d
docs: tutorial: document known_hosts file setup
...
fixes #64
2018-04-01 14:58:04 +02:00
7f89372cfa
docs: fix enumeration in ssh+stdinserver docs
2018-03-04 17:20:08 +01:00
26b436463d
ssh+stdinserver: connect: dial_timeout
...
This is a follow-up to ccd062e
2018-03-04 17:19:41 +01:00
94967b596c
docs: document changes to ssh+stdinserver transport implementation: ccd062e
2018-02-17 15:16:29 +01:00
707a189144
docs: adjust implementation article to rst
2017-11-11 23:25:12 +01:00
4f37dccb76
docs: adjust transports to rst
2017-11-11 23:25:12 +01:00
6f7b8ca1af
docs: adjust jobs documentation to rst + use extlinks extension
2017-11-11 23:25:12 +01:00
2fe7f29d31
docs: index + tutorial rst adjustments
2017-11-11 23:25:12 +01:00
df181108b4
docs: initial port of hugo to sphinx, including rtd theme
2017-11-11 23:25:12 +01:00
Christian Schwarz