Hi,

Ron Gedye schrieb:
> 
> I've used a number of flags to get the file structure I'd like to use.
> Here's my structure:
> /home/httpd
> ..cgi-bin ( port 80 public non-OpenCA "/cgi-bin/")
> ..cgi-pub (port 443 OpenCA pub "/cgi-bin/")
> ..cgi-ra (port 443 OpenCA private "/cgi-bin/")
> ..OpenCA (port 443 OpenCA private html pages)
> ..OpenCA-pub (port 443 OpenCA pub html pages)
> ..Public (port 80 public non-OpenCA html pages)

You can only run one SSL-server on 443. So what do you mean with private
and public html-pages? You can use Apache's configuration to define
accesscontrollists for a special directory.

> Here's the pertinent flags:
> --with-web-host=security.teleformix.com
> --with-ra-htdocs-fs-prefix=/home/httpd/OpenCA
> --with-ra-cgi-fs-prefix=/home/httpd/cgi-ra
> --with-pub-htdocs-fs-prefix=/home/httpd/OpenCA-pub
> --with-pub-cgi-fs-prefix=/home/httpd/cgi-pub
> --with-online-htdocs-fs-prefix=/home/httpd/OpenCA
> --with-online-cgi-fs-prefix=/home/httpd/cgi-ra
> --with-ldap-htdocs-fs-prefix=/home/httpd/OpenCA
> --with-ldap-cgi-fs-prefix=/home/httpd/cgi-ra

You can run on 443 only one https-server. So you can only specify one
DocumentRoot. 

To make it easier for you send the paths which you want to configure.

Example:

/home/httpd/OpenCA    DocumentRoot 443

/       pub-pages
/ra     ra-pages
/ldap   ldap-pages
/online online-pages

/home/httpd/cgi-bin/  your cgi-directory

--with-htdocs-fs-prefix=/home/httpd/OpenCA
--with-pub-htdocs-url-prefix=
--with-pub-htdocs-fs-prefix=/home/httpd/OpenCA

That's all. Now you must restrict the access of your Apache for the
directories

ra/
ldap/
online/
cgi-bin/ra/
cgi-bin/ldap/
cgi-bin/online/
 
> BUT - Here's my question/comment.  It DID NOT matter where I specified the
> cgi's to be placed.
> There WAS NOT an "ra", "online", or "pub" cgi script file(s) anywhere to be
> found.
> There was however an "ldap", "RAServer", "Admin" & "pki" scripts place in
> the apropriate dir's.

That's correct! In my old mail you can see the structure 

Example RA:

cgi-bin/ra/RAServer

on your machine

/home/httpd/cgi-ra/RAServer

The --with-xyz-fs-prefix set the install directory (see ./configure
--help for the default). If you changed the default installationpath
then you must change --with-xyz-url-prefix too!

> I thumbed through the Makefiles in src/cgi-bin and did not find any
> reference to ra, online, or pub, but instead found reference to RAServer,
> Admin & pki.  By copying these cgi's to ra, online & pub (respectively) it
> now appears to operate properly.  Because when the code/html calls for the
> "ra" cgi script it now gets it (RAServer).

You forget to set the appropriate relative URL-paths
(--with-xyz-cgi-url-prefix e.g. --with-ra-cgi-url-prefix=/cgi-ra)

> New Question - Is the Main difference with RC1 & RC2 the update for using a
> SQL database that I saw mentioned on the list?  Can I continue to test with
> RC1 if I'm not currently using sql as my db?

Yes, you can still use RC1. The changes are listed in

ftp://ftp.openca.org/pub/openca/developers/bell/snapshots/CHANGES
 
Best regards

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org


-------------------------------------------------------
This sf.net email is sponsored by: Dice - The leading online job board
for high-tech professionals. Search and apply for tech jobs today!
http://seeker.dice.com/seeker.epl?rel_code=31
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to