COROSYNC-Q...ET-CERTUTIL(8)

✨ NAME ✨

okay so bestie, this is corosync-qdevice-net-certutil 💖 — it's the tool that generates the qdevice model net TLS certificates. she's giving certificate factory, no cap 🎀

---

🌸 SYNOPSIS 🌸

corosync-qdevice-net-certutil [-i|-m|-M|-r|-s|-Q] [-c certificate] [-S
ssh_command] [-C scp_command] [-n cluster_name]

like, look at her run 🏃‍♀️💨

---

🦋 DESCRIPTION 🦋

so corosync-qdevice-net-certutil is literally a frontend for NSS certutil, and her whole job is generating the client certificate for the net model of qdevice. she's the middleman, the wingwoman, the main character ✨

---

💅 OPTIONS 💅

• -i — initializes the QDevice Net NSS certificate database 💖. the default directory for the database is /etc/corosync/qdevice/net/, and heads up: that directory has to be writable by the current user, so check your permissions before you start acting brand new. you also need the QNetd CA certificate passed in with the -c parameter. you can find that certificate on the server running QNetd, sitting pretty in the file /etc/corosync/qnetd/nssdb/qnetd-cacert.crt 🌈
• -m — imports the cluster certificate and key from a pk12 file. bringing her home 🫶
• -r — generates a certificate request 🔥. the certificate request gets exported into /etc/corosync/qdevice/net/qdevice-net-node.crq. and listen — it's necessary to pass the cluster name using the -n parameter, and that cluster name has to match the one defined in /etc/corosync/corosync.conf. no improvising, bestie, the names have to match fr fr 💀
• -M — imports a signed certificate and exports a certificate with private key into a pk12 file. glow up complete 👑
• -Q — uses ssh/scp to properly set both corosync-qnetd and corosync-qdevice certificates on all nodes 🌐. now, it's highly recommended that you use an ssh agent, otherwise ssh/scp will keep asking for a password — roughly 8 times the number of nodes 😭 like she will absolutely spam you with password prompts, that's not a vibe, set up your agent first 🧚
• -c — file with certificate to load 📁
• -S — alternative remote shell command to be used in place of ssh. if you don't specify it, ssh is used. the way you can just swap her out 💅
• -C — alternative remote copy command to be used in place of scp. if you don't specify it, scp is used 🍓
• -n — name of the cluster ⭐

---

💜 SEE ALSO 💜

• corosync-qnetd(8)
• corosync-qdevice(8)

go read those too, they're iconic in their own right 🎀

---

🌟 AUTHOR 🌟

Jan Friesse — thank you for your service, king 👑✨

---

k that's the whole page bestie, you ate 💖 this was from the System Manager's Manual, dated 2016-06-28, and the header said COROSYNC-Q...ET-CERTUTIL(8) — yes the title is literally abbreviated like that in the footer, we love a mysterious queen 💅 mwah, go generate some certificates 🦋