最近在原来的gvpe网路上需要增加一个新的site,突然发现好像gvpe的工具程式gvpectrl似乎没有一个选项可以只产生某一指定的node或新增一个node所需的private及public key。最后决定直接问作者:
Subject:Join a new host of gvpe network
To:gvpe@schmorp.de
Dear sir
How can I do if I'd like to join a new host without re-generate public/private RSA keypair of all hosts? Please help me , thank you !!
作者很快就回覆了:
Hi!
The default mode of operation n gvpectrl is not to generate any new keys.
So the way to do that is to simply run gvpectrl --gen-key, and the distribute the new keys - gvpectrl will simply skip the existing keys.
If you do not have all keys anymore, that doesn't matter either, you
can just throw away the newly generated keys and keep the old ones for
existing nodes.
简单说,gvpectrl -c /etc/gvpe/gvpe.conf -g 这个产生key的指令会略过已经存在的key,只产生新的。所以重新将/etc/gvpe/pubkey/下新产生的key发送至其他node,将/etc/gvpe/hostkeys/下新产生的private key发送到新node成为/etc/gvpe/hostkey就可以了。