Sasidharan M wrote:

>Hi Micheal,
>
>I had done all the setup and I am able to do almost all functions with OpenCA 
>0.9.0.  Now, my doubts are:
>
>1.  User filled a request and which has to send to RA for and sign.  After 
>signing this request, will export to CA for CA's signing on this.  After CA's 
>signing again this should be imported to RA for user's use.  Please correct 
>me if I am wrong.  In this process I am not able to understand in which stage 
>user can get his/her private/public key?
>
This question is only relevant for basic request.

The private key is downloadable for the user if the certificate was 
issued by the CA and imported into the RA. The private key can only be 
downloaded from the RA-interface. It is not possible to download it from 
the public interface to avoid brute force attacks.

The public key is part of the certificate. If you downloaded the 
certificate then you have the public key.

private key on RA:

certificates --> valid --> certifcate 123 --> download certificate and key

Michael

-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org




-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to