Revision 68857643 doc/design-2.2.rst
| b/doc/design-2.2.rst | ||
|---|---|---|
| 246 | 246 |
will be prepended to the certificate similar to an RFC822 header and |
| 247 | 247 |
only covers the certificate (from ``-----BEGIN CERTIFICATE-----`` to |
| 248 | 248 |
``-----END CERTIFICATE-----``). The header name will be |
| 249 |
``X-Ganeti-Signature``. |
|
| 249 |
``X-Ganeti-Signature`` and its value will have the format |
|
| 250 |
``$salt/$hash`` (salt and hash separated by slash). The salt may only |
|
| 251 |
contain characters in the range ``[a-zA-Z0-9]``. |
|
| 250 | 252 |
|
| 251 | 253 |
On the web, the destination cluster would be equivalent to an HTTPS |
| 252 | 254 |
server requiring verifiable client certificates. The browser would be |
Also available in: Unified diff