Certificate Authority

To connect to peerfuse network, you must get your own certificate and the CA certificate

CA Certificate can be downloaded here: http://ca.peerfuse.net/ca.crt
Certificate revocation list URL is: http://ca.peerfuse.net/crl.pem

Get certificate

Currently there isn't any automatical procedure to get a signed certificated.

But you can send a CSR to ca@peerfuse.net, we'll create a .crt and sign it.

How to make a .csr

In the peerfuse sources, there is a tools/pf-pki directory which contains some scripts.

Go in and run:

$ source ./vars
$ ./clean-all

Now create your private key and csr with:

$ ./build-req peer_name

Go in the keys/ subdir to find yours peer_name.key and peer_name.csr files.

Send peer_name.csr to ca@peerfuse.net. When you will receive .crt, download the CA certificate and configure Peerfuse to use ca.crt, peer_name.key and peer_name.crt.

Also set the crl_url variable to http://ca.peerfuse.net/crl.pem.

Warning: do NOT send your .key! It is a private key.