For properly authenticate the node on the testbed the node admin should create a certiticate request with the following two mandatory entries:
Common Name (CN): node's RD management address ({{ node.mgmt_net.addr }}) (the domain that we want to secure)
Email Address: technician's e-mail address for contact
The following command can be used for generating the requests and also generate the key pair:
openssl req -nodes -newkey rsa:2048 -keyout mynode.key -out mynode.csr
But of course existing node keys can be used, for example the Tinc key:
openssl req -new -key /etc/tinc/confine/rsa_key.priv -out mynode.csr
Upload a node certificate to be signed (CSR file in PEM format) using the following form:
{% endblock %}