Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
COROSYNC-KEYGEN(8)	    System Manager's Manual	    COROSYNC-KEYGEN(8)

NAME
       corosync-keygen - Generate an authentication key	for Corosync.

SYNOPSIS
       corosync-keygen [-k <filename>] [-l]

DESCRIPTION
       If  you	want  to configure corosync to use cryptographic techniques to
       ensure authenticity and privacy of the messages,	you will need to  gen-
       erate a private key.

       corosync-keygen creates this key	and writes it to /etc/corosync/authkey
       or to file specified by -k option.

       This private key	must be	copied to every	processor in the cluster.   If
       the  private  key  isn't	the same for every node, those nodes with non-
       matching	private	keys will not be able to join the same configuration.

       Copy the	key to some security  transportable  storage  or  use  ssh  to
       transmit	the key	from node to node.  Then install the key with the com-
       mand:

       unix#: install -D --group=0 --owner=0 --mode=0400  /path_to_authkey/au-
       thkey /etc/corosync/authkey

       If  a message "Invalid digest" appears from the corosync	executive, the
       keys are	not consistent between processors.

       Note: corosync-keygen will ask for user input to	assist	in  generating
       entropy unless the -l option is used.

OPTIONS
       -k <filename>
	      This  specifies  the  fully  qualified path to the shared	key to
	      create.
	      The default is /etc/corosync/authkey.

       -l     Use a less secure	random data source that	will not require  user
	      input  to	 help  generate	entropy.  This may be useful when this
	      utility is used from a script or hardware	random number  genera-
	      tor is not available (f.e. in virtual machine).

EXAMPLES
       Generate	the key.

       # corosync-keygen
       Corosync	Cluster	Engine Authentication key generator.
       Gathering 1024 bits for key from	/dev/random.
       Press keys on your keyboard to generate entropy.

       $ corosync-keygen -l -k /tmp/authkey
       Corosync	Cluster	Engine Authentication key generator.
       Writing corosync	key to /tmp/authkey.

SEE ALSO
       corosync_overview(8), corosync.conf(5),

AUTHOR
       Angus Salkeld

				  2010-05-30		    COROSYNC-KEYGEN(8)

NAME | SYNOPSIS | DESCRIPTION | OPTIONS | EXAMPLES | SEE ALSO | AUTHOR

Want to link to this manual page? Use this URL:
<https://www.freebsd.org/cgi/man.cgi?query=corosync-keygen&sektion=8&manpath=FreeBSD+12.1-RELEASE+and+Ports>

home | help