add info on installing and configuring public key certificate systems;

diff --git a/1.6/admin/serversideinstallation.xml b/1.6/admin/serversideinstallation.xml
index 7ea420e..20adc19 100644 (file)
--- a/1.6/admin/serversideinstallation.xml
+++ b/1.6/admin/serversideinstallation.xml
@@ -672,7 +672,7 @@
                                        <systemitem class="service">math</systemitem> service:</para>\r
                                        <screen>\r
                                                <userinput>/openils/bin/srfsh</userinput>\r
-                                               <computeroutput>srfsh# <userinput>request opensrf.math add 2 2</userinput></computeroutput> \r
+                                               <computeroutput>srfsh# <userinput>request opensrf.math add 2 2</userinput></computeroutput>\r
                                                <computeroutput>Received Data: 4</computeroutput>\r
                                                <computeroutput>------------------------------------</computeroutput>\r
                                                <computeroutput>Request Completed Successfully</computeroutput>\r
@@ -981,8 +981,8 @@
                                        following commands:</para>\r
                                        <screen>\r
                                                <userinput>cd /openils/conf</userinput>\r
-                                               <userinput>cp opensrf.xml              opensrf.xml.BAK</userinput>\r
-                                               <userinput>cp opensrf_core.xml         opensrf_core.xml.BAK</userinput>\r
+                                               <userinput>cp opensrf.xml             opensrf.xml.BAK</userinput>\r
+                                               <userinput>cp opensrf_core.xml   opensrf_core.xml.BAK</userinput>\r
                                                <userinput>cp opensrf.xml.example      opensrf.xml</userinput>\r
                                                <userinput>cp opensrf_core.xml.example opensrf_core.xml</userinput>\r
                                                <userinput>cp oils_web.xml.example     oils_web.xml</userinput>\r
@@ -1116,7 +1116,7 @@
                                                                        user, perform the following commands:</para>\r
                                                                        <screen>\r
                                                                                <userinput>cd /home/opensrf/Evergreen-ILS-1.6.1.2</userinput>\r
-                                                                               <userinput>cp Open-ILS/examples/apache/eg.conf        /etc/apache2/sites-available/</userinput>\r
+                                                                               <userinput>cp Open-ILS/examples/apache/eg.conf  /etc/apache2/sites-available/</userinput>\r
                                                                                <userinput>cp Open-ILS/examples/apache/eg_vhost.conf  /etc/apache2/</userinput>\r
                                                                                <userinput>cp Open-ILS/examples/apache/startup.pl     /etc/apache2/</userinput>\r
                                                                        </screen>\r
@@ -1234,8 +1234,7 @@
                                                                                        changes increase the number of Apache server\r
                                                                                        processes that are started to support additional\r
                                                                                        browser connections.</para>\r
-                                                                                       <para>As the <systemitem\r
-                                                                                       class="username">root</systemitem> user, edit the\r
+                                                                                       <para>As the <systemitem class="username">root</systemitem> user, edit the\r
                                                                                        Apache configuration file\r
                                                                                        <filename>/etc/apache2/apache2.conf</filename>,\r
                                                                                        locate and modify the section related to\r
@@ -1243,10 +1242,10 @@
                                                                                        the load on your system:</para>\r
                                                                                        <programlisting language="xml"><![CDATA[\r
 <IfModule mpm_prefork_module>\r
-   StartServers           20\r
-   MinSpareServers         5\r
-   MaxSpareServers        15\r
-   MaxClients            150\r
+   StartServers           20\r
+   MinSpareServers      5\r
+   MaxSpareServers     15\r
+   MaxClients      150\r
    MaxRequestsPerChild 10000\r
 </IfModule>\r
 ]]></programlisting>\r
@@ -1489,7 +1488,6 @@
                        expected.</para>\r
                        <simplesect xml:id="serversideinstallation-testing-connections">\r
                                <title>Testing Connections to Evergreen</title>\r
-\r
                                <para>Once you have installed and started Evergreen, test your connection to Evergreen. Start the\r
                                <command>srfsh</command> application and try logging onto the Evergreen server using the default\r
                                administrator username and password. Following is sample output generated by executing\r
@@ -1579,10 +1577,19 @@
                                <title>Configure a permanent SSL key</title>\r
                                <para>In a previous step (see <xref linkend="serversideinstallation-createcertificate"/>)\r
                                you used the command <command>openssl</command> to temporarily\r
-                               create a new SSL key for the Apache server. This self-signed certificate was adequate\r
+                               create a new SSL key for the Apache server. This self-signed security certificate was adequate\r
                                during testing and development, but will continue to generate warnings in the Staff Client \r
                                and browser. For a public production server you should configure or purchase a signed SSL\r
                                certificate.</para>\r
+                               <para>There are several open source software solutions that provide schemes to generate and\r
+                               maintain public key security certificates for your library system. Some popular projects are\r
+                               listed below; please review them for background information on why you need such a system and how\r
+                               you can provide it:</para>\r
+                               <itemizedlist>\r
+                                       <listitem><ulink url="http://www.openca.org/projects/openca/">http://www.openca.org/projects/openca/</ulink></listitem>\r
+                                       <listitem><ulink url="http://sourceforge.net/projects/ejbca/">http://sourceforge.net/projects/ejbca/</ulink></listitem>\r
+                                       <listitem><ulink url="http://pki.fedoraproject.org">http://pki.fedoraproject.org</ulink></listitem>\r
+                               </itemizedlist>\r
                                <warning>\r
                                        <para>\r
                                                <emphasis>The temporary SSL key was only created to expedite\r