Hi all,

I guess some of you had problems in configuring access to node management,
etc... indeed it can be tricky on some systems (e.g. in Fedora) as the
SSLOptions in the default configuration (/etc/http/conf.d/ssl.conf) are
wrongly set only for some directories/files. You can try setting it correctly
form this:

  <Files ~ "\.(cgi|shtml|phtml|php3?)$">
      SSLOptions +StdEnvVars +ExportCertData
  </Files>
  <Directory "/var/www/cgi-bin">
      SSLOptions +StdEnvVars +ExportCertData
  </Directory>

to the simpler:

  SSLOptions +StdEnvVars +ExportCertData

I am also finishing fixing some bugs in the packaging (especially in the
area of the OPENCA/etc/). More precisely:
- Fixed a bug that prevented the configure_etc.sh script to correctly
  update the .xml files from the .xml.template
- Included the execution of the configure_etc.sh script inside the openca_rc
  script. Therefore you do not need to do that separately from starting
  openca.
- To fix a security flaw --- i.e. default password being on all the systems
  the same, which could lead admins to leave it as it is --- now after
  installation the first time openca is started it will ask for a password
  to be used on the web interfaces.
- Fixed the missing creation of the OPENCA/var/crypto/crls dir which caused
  the creation of new CRLs to fail (only if you used .rpm packages)

I'll publish the rc2 version soon... :)

Cheers,

--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]            [EMAIL PROTECTED]
                                                 [EMAIL PROTECTED]

Dartmouth Computer Science Dept               Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063                        Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
OpenCA-Devel mailing list
OpenCA-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to