censhare authentication with private-public key

For system user login (server to server login), there is a private/public key process with a signed token as an alternative to password authentication.

Introduction

Note: Only RSA as the key algorithm is supported.

Public key naming

The keys are managed via keytool. For more information, see java's keytool.

Follow a naming convention @_ _ is optional.

The following client types are valid:

javaclient javaadmin javarender webclient webtunnel service-client online-channel remote-server shelladmin client

Example

master server CSS_ID = master remote server CSS_ID = remote

Remote Server

Prepare everything on the master server and sync to remote server:

1. Create a keypair for the authentication:

   BASH

   keytool -genkeypair -alias system@remote-server -keyalg RSA -keysize 2048 \-keystore ~/cscs/app/config/keystore -storepass corpus \-validity 36500 -dname "CN=system, OU=Remote-Server, O=censhare AG, L=MUC, S=BY, C=DE"

2. Sync to remote server:

   BASH

   rsync -axz --delete ~/cscs/app/config/ corpus@remote-server:cscs/app/config

3. Restart censhare-Server on each host:

   BASH

   censhare.rc restart