Hi Ralf,

sorry for the delay.. I think there are two options here.

Option n. 1: on the RA
======================

Implement an "Import CSV Requests" with an upload button. The
command should implement two status:
  1st: upload the CSVs
  2nd: generate the keys and Requests and put them in the DB

This can be done at RA level and requests can be handled as being
already approved by the RA.

Option n. 2: on the CA
======================

Provide the same command on the CA as in Option 1, with the
difference that the certificates are also generated as usual
by using the same approach we use for the online CA (look at
the startAutoCA command (from line 305).

I think that Option n.1 is the best way to go as this would fit
well online and offline CAs.


NOTE:

Once the certificates have been issued, users will be able to download
the P12 files from the normal interface. If you need to generate an
archive of P12 files that is automatically exported for the RA (or CA)
operator, more work is required.

Ciao,
Max


On 11/29/2009 02:31 PM, Ralf Hornik Mailings wrote:
Hi,

I want to implement the ability to generate PKCS12 files using CSV based
CSR generation:

Name,email,role,loa,pin
----------------------------------------------
Ralf Hornik,r...@domain.org,User,1,ba11aba||a
...
-----------------------------------------------

--

Best Regards,

        Massimiliano Pala

--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                   ope...@acm.org
                                                 project.mana...@openca.org

Dartmouth Computer Science Dept               Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory                          Work Phone: +1 (603) 646-8734
--o------------------------------------------------------------------------
People who think they know everything are a great annoyance to those of us
who do.
                                                           -- Isaac Asimov

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

------------------------------------------------------------------------------
Throughout its 18-year history, RSA Conference consistently attracts the
world's best and brightest in the field, creating opportunities for Conference
attendees to learn about information security's most important issues through
interactions with peers, luminaries and emerging and established companies.
http://p.sf.net/sfu/rsaconf-dev2dev
_______________________________________________
OpenCA-Devel mailing list
OpenCA-Devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to