USAGE
- make-secnet-sites [-P PREFIX] [IN [OUT]]
- make-secnet-sites -u HEADER GRPDIR SITESFILE GROUP
+ make-secnet-sites [-P PREFIX] [--conf] [IN [OUTCONF]]
+ make-secnet-sites --filter [IN [OUT]]
+ make-secnet-sites -u|--userv HEADER GRPDIR SITESFILE GROUP
The `-P' option sets the PREFIX string, mentioned below in
`OUTPUT STRUCTURE'; the default is empty.
- In the former mode, `make-secnet-sites' reads a single input
+ In --conf mode, `make-secnet-sites' reads a single input
file from IN (defaulting to standard input), and writes a Secnet
- configuration fragment to OUT (defaulting to standard output).
+ configuration fragment to OUTCONF (defaulting to standard output).
- In the latter, `make-secnet-sites' expects to have been invoked
+ In --filter mode, `make-secnet-sites' reads a single input
+ file from IN (defaulting to standard input), and writes a
+ version of that sites file to OUT (defaulting to standard
+ output). The output is filtered according to --output-version.
+
+ In --userv mode, `make-secnet-sites' expects to have been invoked
via GNU Userv. It verifies that GROUP is listed in the
`USERV_GROUP' environment variable. It then processes the
HEADER input, which should say `end-defintions' somewhere, to
refer to keys in PUBKEYS; also, the generated secnet
configuration enables live peer public update.
+ --pubkeys-single
+
+ Specifies that one public key per site is to be
+ written directly into the sites.conf output. If
+ --output-version=1, this is the rsa1 key 0000000000.
+ Otherwise it is an error if there are multiple public
+ keys defined for any site, in the input.
+ --pubkeys-single is the default.
+
+ --pubkeys-elide
+
+ In the sites.conf output, just write the peer-keys
+ entry referring to keys in PUBKEYS. But do not write
+ public keys anywhere.
+
--pubkeys-dir PUBKEYS
Specifies the live pubkeys area pathname.
Specifies the key set id (8 hex digits representing
4 bytes: each pair is the value of the next byte).
May appear at most once. If not present, 00000000.
- Not yet suported in make-secnet-sites.
pkg GROUPIDHEX
pkgf GROUPIDHEX
pkgf indicates a fallback group.
May be repeated (with different id values).
If not specified, 00000000.
- Not yet suported in make-secnet-sites.
OUTPUT STRUCTURE