From: Peter Palfrader <peter@palfrader.org>
Date: Thu, 12 Mar 2009 19:00:03 +0000 (+0100)
Subject: ilo https
X-Git-Url: https://git.adam-barratt.org.uk/?a=commitdiff_plain;h=2d7d8e86924b44d299d038a0d127847577e1dfd3;p=mirror%2Fdsa-wiki.git

ilo https
---

diff --git a/input/howto/ilo-https.mdwn b/input/howto/ilo-https.mdwn
new file mode 100644
index 0000000..7da3890
--- /dev/null
+++ b/input/howto/ilo-https.mdwn
@@ -0,0 +1,15 @@
+HP iLO systems do https.
+
+we have our own ilo-CA for them.  To create a new cert, fetch the
+CSR, then use the sign-modified-csr script in the CA-ilo dir on our CA host.
+If we have a complete management network, add the hostname from that to
+the cert also, for instance gluck-ilo.debprivate-ftcollins.debian.org.  If
+the iLO has a public internet hostname or even just an IP address that we
+sometimes use to access it, add that too.
+
+There are also two scripts that let you fetch CSRs from the iLO and push
+a cert to the iLO without going through the web interface.  You can find
+them next to the sign-modified-csr in the dsa-misc git repository, or
+on the CA host.
+
+weasel, Fri,  3 Oct 2008 12:16:08 +0200
diff --git a/input/index.mdwn b/input/index.mdwn
index e194ec5..367769d 100644
--- a/input/index.mdwn
+++ b/input/index.mdwn
@@ -23,6 +23,7 @@ VCS repositories for ud-ldap and all our other stuff can be found at
 * [[howto/dns]]
 * [[howto/puppet-setup]]
 * [[howto/upgrade-to-lenny]]
+* [[howto/ilo-https]]
 
 ## misc