Hello, I wanted to know what channel is used by OvS to fetch the CA certificate from the controller in bootstrap mode? Is it over SSL, OF, TCP or something else?
Also, I am trying to understand the need of having this CA certificate on OvS. My current scenario - I have a northbound application on top of my controller who signs the OvS certificate. When the certificate is signed and sent back, I am setting the certificates on OvS and establishing the SSL connection. On my controller, I am using OpenDaylight and storing the same CAcert that signs the OvS certificate in truststore.jks file which maintains the OvS keys or CAcert depending on the way we use OvS. I was wondering why is the CAcert being pulled by OvS if it is signed by the same CAcert preset in the ODL truststrore.jks. Any input on this is greatly appreciated! Thanks, Sanket Tandulwadkar
_______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss