Marco wrote:
Hi,
I'm currently running a PKI for a university. Software we are using doesn't satisfy me.
NewPKI looks as a good replacement, but I've some questions.
1) How I can import our current root CA and sub-CA certificates?
On beta4 you won't be able.
However I added this feature on the cvs, if you want I could backport it on the stable branch.
2) Every dialog windows for certificate request for CA and sub-CA seems require that all attribute fields (e.g. Locality, State or Province, ecc...) must be filled to continue in operation.
This is a little bit frustrating: because no one really
knows what a locality is supposed to refer to (CA location?, user location?) as well explained by Peter Gutmann (X.509 Style Guide), a organisation like mine, with several regional site, prefer to leave it blank.
OK, I see what you mean. Personally, when I create a CA the Location refers to the CA location.
3) How I can setup a configuration with CA main server will remain off-line?
Not possible on beta4, I didn't create the Repository GUI, on next version, you will be able the synchronize manually two repositories, this will allow you to have the PKI entity + the CAs entity on an offline machine and synchronize them with the rest of the PKI.
-- Fr�d�ric Giudicelli http://www.newpki.org _____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
