Comment 16 for bug 1522597

Revision history for this message
Nipa (nipak) wrote :

Hi Prasad/Abhay,

  1) Agent has two flags to be set in order to enable ssl based cert exchange with each of the other daemons I.e control-node and dns-server
xmpp_auth_enable=true (ssl based certificate exchange with control-node)
xmpp_dns_auth_enable=true (ssl based certificate exchange with dns-server)
2) control-node has a flag to enable authentication I.e "xmpp_auth_enable=true"
3) dns-server had a flag to enable authentication I.e "xmpp_auth_enable=true"

As discussed, let us generate certs and copy them to default location irrespective of the above flags. Please note in future other daemons will
Also enable ssl based authentication and will use the same cert, we will only use a flag for each of the daemons to enable authentication.

-nipa