Hi,

yesterday evening I run issueCertificate of OpenCA v0.9 successfully for
the first time. Perhaps you are smiling about this but here is a small
list with the new features:
 
* public keys are checked to be unique
* PINs can be used from the request or automatically generated
* DN configuration
* encrypted and signed PIN-mail
* role-support
* every role has it's own extfile and openssl configfile
* if issueCertificate crashs before the cert was stored in the
  database then the old openssl state will be recovered
* email subjAltName but not in the DN

I hope we need no more new features so we can start serious testing.
 
I will start with:
 
general: new OpenCA::DBI (smaller and faster)
1. issuing certs
2. CRRs
3. RBAC
 
The new installationcode in OpenCA v0.9 allows the creation of snapshots
by yourself. You must only do the following:
 
* download openca-0.9 from the cvs
* cd openca-0.9
* ./Config or ./configure --with-your-own-configuration
* make
* make install-ca install-ext
 
Please have a look into Config because it shows you a configuration
which places ALL FILES below /usr/local/openca. So you can remove the
hole software via "rm -rf /usr/local/openca" including the perlmodules
and binaries.
 
If you want to fix a bug please write a mail to me or a mailing list and
please do not check in the bug into the bugtrackingsystem on Sourceforge
because we use it actually to track the errors of v0.8. If you check in
a bug on Sourceforge please mark it clearly that you mean OpenCA v0.9.
 
Be warned - this is a status message only. Don't switch from OpenCA v0.8
to v0.9. The major advantages will be RBAC, CRRs and a very good
installation but only the installation is in the beta-phase.
 
Regards Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                     [OpenCA Core Developer]

http://openca.sourceforge.net

_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to