Brian May wrote:
There appears to be a chicken-and-egg type problem here.

I can't login to the CA web page because I don't have https support.

However I can't get https support because I need a certificate first.

However I can't get a certificate because openca is not yet configured.

However I can't configure openca without being able to log in first...

Comments?

I added plain http support to src/modules/openca-ac/AC.pm. If you configure the channel like follows then you can login via an unencrypted connection.


        <channel>
            <type>mod_ssl</type>
            <protocol>http</protocol>
            <source>.*</source>
            <asymmetric_cipher>.*</asymmetric_cipher>
            <asymmetric_keylength>0</asymmetric_keylength>
            <symmetric_cipher>.*</symmetric_cipher>
            <symmetric_keylength>0</symmetric_keylength>
        </channel>

Today I'm preparing an update of the documentation to describe this problem. You can use on the CA at every time an unencrypted line if the CA is offline. I changed the default configuration of CA but I cannot do this for node.

Best regards

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by:Crypto Challenge is now open! Get cracking and register here for some mind boggling fun and the chance of winning an Apple iPod:
http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0031en
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to