[OpenAFS] AES Support ?
Derrick J Brashear
shadow@dementia.org
Thu, 27 Sep 2007 15:54:11 -0400 (EDT)
On Thu, 27 Sep 2007, John Hascall wrote:
> By "not yet completed" I meant started. If I'm understanding
> the process as it was outlined many messages ago it was:
>
> 1) create afs-k5 or (or is it k5-afs?) key
> 2) upgrade all your servers
> 3) upgrade all your clients
> 4) remove the old afs key
actually, i think i'd upgrade the servers, then add the key, then upgrade
the clients, then remove the old key
for experimental deployment i'd use a 3rd key that clients needed to know
about to use.