mirror of
https://github.com/corda/corda.git
synced 2024-12-29 09:18:58 +00:00
54 lines
2.0 KiB
Markdown
54 lines
2.0 KiB
Markdown
|
#Network Registration Tool
|
||
|
|
|
||
|
|
The network registration tool creates a CSR (Certificate Signing Request) and sent to compatibility zone doorman for approval.
|
||
|
|
A keystore and a trust store will be created once the request is approved.
|
||
|
|
|
||
|
|
##Configuration file
|
||
|
|
The tool creates the CSR using information provided by the config file, the path to the config file should be provided
|
||
|
|
using the ``--config-file`` flag on start up.
|
||
|
|
|
||
|
|
The config file should contain the following parameters.
|
||
|
|
|
||
|
|
```
|
||
|
|
Parameter Description
|
||
|
|
--------- -----------
|
||
|
|
legalName Legal name of the requester. It can be in form of X.500 string or CordaX500Name in typesafe config object format.
|
||
|
|
|
||
|
|
email Requester's e-mail address.
|
||
|
|
|
||
|
|
compatibilityZoneURL Compatibility zone URL.
|
||
|
|
|
||
|
|
networkRootTrustStorePath Path to the network root trust store.
|
||
|
|
|
||
|
|
certRole Requested cert role, it should be one of [NODE_CA, SERVICE_IDENTITY].
|
||
|
|
|
||
|
|
networkRootTrustStorePassword Network root trust store password, to be provided by the network operator. Optional, the tool will prompt for password input if not provided.
|
||
|
|
|
||
|
|
keyStorePassword Generated keystore's password. Optional, the tool will prompt for password input if not provided.
|
||
|
|
|
||
|
|
trustStorePassword Generated trust store's password. Optional, the tool will prompt for password input if not provided.
|
||
|
|
```
|
||
|
|
|
||
|
|
Example config file
|
||
|
|
```
|
||
|
|
legalName {
|
||
|
|
organisationUnit = "R3 Corda"
|
||
|
|
organisation = "R3 LTD"
|
||
|
|
locality = "London"
|
||
|
|
country = "GB"
|
||
|
|
}
|
||
|
|
# legalName = "C=GB, L=London, O=R3 LTD, OU=R3 Corda"
|
||
|
|
email = "test@email.com"
|
||
|
|
compatibilityZoneURL = "http://doorman.url.com"
|
||
|
|
networkRootTrustStorePath = "networkRootTrustStore.jks"
|
||
|
|
certRole = "NODE_CA"
|
||
|
|
|
||
|
|
networkRootTrustStorePassword = "password"
|
||
|
|
keyStorePassword = "password"
|
||
|
|
trustStorePassword = "password"
|
||
|
|
|
||
|
|
```
|
||
|
|
|
||
|
|
##Running the registration tool
|
||
|
|
|
||
|
|
``java -jar registration-tool-<<version>>.jar --config-file <<config file path>>``
|