censhare authentication with private-public key
For system user login (server to server login), there is a private/public key process with a signed token as an alternative to password authentication.
Introduction
Note: Only RSA as the key algorithm is supported.
Public key naming
The keys are managed via keytool. For more information, see java's keytool.
Follow a naming convention @_ _ is optional.
The following client types are valid:
javaclient javaadmin javarender webclient webtunnel service-client online-channel remote-server shelladmin client
Example
master server CSS_ID = master remote server CSS_ID = remote
Remote Server
Prepare everything on the master server and sync to remote server:
Create a keypair for the authentication:
BASHkeytool -genkeypair -alias system@remote-server -keyalg RSA -keysize 2048 \-keystore ~/cscs/app/config/keystore -storepass corpus \-validity 36500 -dname "CN=system, OU=Remote-Server, O=censhare AG, L=MUC, S=BY, C=DE"
Sync to remote server:
BASHrsync -axz --delete ~/cscs/app/config/ corpus@remote-server:cscs/app/config
Restart censhare-Server on each host:
BASHcenshare.rc restart