Forum: Cfengine Help
Subject: Re: New key naming algorithm
Author: mark
Link to topic: https://cfengine.com/forum/read.php?3,19099,19227#msg-19227

I realize that my comment can be misinterpreted.

1. Cfengine (cf-agent/cf-servd) *will* convert keys automatically the first 
time they are used. If the old format keys are not used, then will not be 
converted.

2. Cleaning up old, unused keys can be an issue no matter whether it is old or 
new format. For that, I suggest tidying the keys based on a revocation horizon 
time.

3. The cf-key program is just to show you the triplet (hostname,ipaddress,hash) 
for ease of management,

_______________________________________________
Help-cfengine mailing list
Help-cfengine@cfengine.org
https://cfengine.org/mailman/listinfo/help-cfengine

Reply via email to