X-Git-Url: https://www.tinc-vpn.org/git/browse?p=tinc;a=blobdiff_plain;f=doc%2FHOWTO;h=b229cafcb353b22901d6c3825d77aa9885843997;hp=15c89713fb5fc1185c0bd4bc9b8206f7beaee6e8;hb=ce72275a4342ff4e21d21bb740ee88dca1ddb5f1;hpb=1a1ebefd572c18d6af187750847b024ce07551ae

diff --git a/doc/HOWTO b/doc/HOWTO
index 15c89713..b229cafc 100644
--- a/doc/HOWTO
+++ b/doc/HOWTO
@@ -109,7 +109,25 @@ any data because it doesn't know where everybody is.
 The passphrases
 ---------------
 We will have to generate keys for ourselves, and get a key from everybody
-we want to ConnectTo. 
+we want to ConnectTo. All of these go into a directory named
+/etc/tinc/passphrases. PROTECT THIS DIRECTORY!
+
+	mkdir -m 700 /etc/tinc/passphrases
+
+To generate our own key:
+
+	genauth 1024 >/etc/tinc/passphrases/local
+
+You should then proceed to give this key to anyone who wants to ConnectTo
+you. DO THIS IN A SECURE MANNER! Anyone who has this number can do icky
+things to the umbrella network! Encrypt it using PGP, GPG or another
+program using asymetric keys. Read it over the phone (without anyone
+listening of course). Send it by snailmail. Write the key down and bring
+it to your partners yourself!
+
+If you get any keys from your partners, store them under their network
+number. For example, the key we get from fdiv's network administrator
+will be stored in /etc/tinc/passphrases/192.168.2.0 (note the 0).
 
 --
-$Id: HOWTO,v 1.2.2.1 2000/06/30 20:50:47 wsl Exp $
+$Id: HOWTO,v 1.2.2.2 2000/06/30 21:16:52 wsl Exp $