Massimiliano Pala wrote:
>
> Michael Bell wrote:
> >
> Remeber not to include the modules/*.tar.gz files, I you added them, just
> delete...
What is with modules which are only compatible with openca-0.9 (X509)?
> > Now we can tinker with the new parts until openca-0.8 is officially
> > released.
> >
> > I will perform the following tasks:
>
> on the openca-0.9 version, I guess... (???)
Yes, of cause.
> > 2. commit all the RBAC-stuff
>
> Ok. Have you seen my mail about handling ROLES with Attributes Certificates ?
> Any comments on that ??
I would like to implement our rolemanagement via attributecertificates
but there are some major problems:
2.1 openssl doesn't support such certificates
2.2 a certificate can own several attributecertificates which represents
for example several different roles but this would be no problem because
we could enforce our role model with some remarks in the
attributecertifcates (e.g. "Role RA Operator of OpenCA Role Based Access
Control").
So if openssl can produce attributecertifcates then I would so fast as
possible reimplement our rolemanagement.
> ...
>
> This is all the unfinished work still pending in the 0.8
> version... some other features missing that are worth adding to the
> openca-0.8 version ???
Please sent a note if you add or fix something in openca-0.8 so that I
can fix it in openca-0.9. It's a little bit stupid work but better than
mixing stable and unstable versions.
Michael
--
-------------------------------------------------------------------------
Michael Bell Email: [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email (work):
[EMAIL PROTECTED]
Humboldt-University of Berlin Tel.(work): +49 (0)30-2093 2482
Unter den Linden 6 Fax.(work): +49 (0)30-2093 2959
10099 Berlin
Germany [OpenCA Core
Developer]
http://openca.sourceforge.net
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
http://lists.sourceforge.net/lists/listinfo/openca-devel
