Skip to main content
Skip table of contents

censhare authentication with private-public key

For system user login (server to server login), there is a private/public key process with a signed token as an alternative to password authentication.


Introduction



Note: Only RSA as the key algorithm is supported.

Public key naming

The keys are managed via keytool. For more information, see java's keytool.

Follow a naming convention @_ _ is optional.


The following client types are valid:

BASH
javaclient javaadmin javarender webclient webtunnel service-client online-channel remote-server shelladmin client

Example

master server CSS_ID = master remote server CSS_ID = remote

Remote Server

Prepare everything on the master server and sync to remote server:

  1. Create a keypair for the authentication:

    BASH
    keytool -genkeypair -alias system@remote-server -keyalg RSA -keysize 2048 \-keystore ~/cscs/app/config/keystore -storepass corpus \-validity 36500 -dname "CN=system, OU=Remote-Server, O=censhare AG, L=MUC, S=BY, C=DE"

  2. Sync to remote server:

    BASH
    rsync -axz --delete ~/cscs/app/config/ corpus@remote-server:cscs/app/config

  3. Restart censhare-Server on each host:

    BASH
    censhare.rc restart
JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.