explanation of the general process ....

the user is not doing anything and that's my problem i think.

a local registration authority (LRA) is in charge of typing the users
information on the "pub" IHM interface.
the keys (private and public) are generated on either  the LRA client host
or  the central RA server.
depending on user choice.
for a signing certificate it will be done on the LRA and for a
authentification / crypting certificat it will be done on the RA so that it
can be backuped for renewal purpose.
(i made the difference by mapping the basic request and IE/Netscape Request
to authentification / signing request).

the request are always made on the LRA

The certificate are then distributed on a "smart card" and the PIN is at the
moment distributed by e-mail
(they should soon be distributed "on paper" if i manage to make  the RA to
do it!!)

therefor and with this architecture my main problem is that the LRA is
typing everything including the PIN number
i don't want this. that's why i would be great if the PIN was generated
automatically by the RA  sent by mail and then written to the "smart card".

somthing else is about the lenght of the PIN. my smart card does not support
more than 8 char ... is it possible to
reduce it ? (the default value on the PUB interface is 10)


thanks a lot
@+
Ben
OpenSource OpenTechnologies


----- Original Message -----
From: "Michael Bell" <[EMAIL PROTECTED]>
To: "CLEYET-MARREL Benjamin" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, September 10, 2002 3:21 PM
Subject: Re: [Openca-Users] PIN length


> Hi,
>
> before I can answer such question could you describe the process or
> workflow which you want to implement?
>
> 1. What should the user do?
> 2. Where do you want to generate the keys?
> 3. Where do you want to create the requests?
> 4. How do you want to distribute the certificate?
>
> Michael
> --
> -------------------------------------------------------------------
> Michael Bell                   Email (private): [EMAIL PROTECTED]
> Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
> Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
> Unter den Linden 6             Fax:  +49 (0)30-2093 2959
> 10099 Berlin
> Germany                                       http://www.openca.org
>
>
> -------------------------------------------------------
> This sf.net email is sponsored by: OSDN - Tired of that same old
> cell phone?  Get a new here for FREE!
> https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users
>




-------------------------------------------------------
This sf.net email is sponsored by: OSDN - Tired of that same old
cell phone?  Get a new here for FREE!
https://www.inphonic.com/r.asp?r=sourceforge1&refcode1=vs3390
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to