Ron Gedye wrote: > Since then, the project has sat idle. Until now. > The boss has decided he doesn't like the 'labels' I used to create the > CA, having 'Certificate Authority' in the descriptor rather than the > company name. > > My guess is no, but is there anyway to preserve the existing issued > certificates and change the CA to meet his needs, or do I need to start > over (clearing the DB)?
I have to ask my colleague because we renewed our CA sometime ago but I don't know how we do it (exchanging the CA-chain or exchanging all user-certs). Otherwise a change of the 'label' is a really bad argument for a replacement of the CA-cert. > Next question - what are the advantages to upgrading to the lastest RC > (6 i believe, I've been offlist for a bit)? I noted that most of the > changes initially seemed to be concerned with using a SQL backend. What > is the process of applying the latest RC, are patches available? Simply install the new version if you use OpenCA::DB but please wait until we published RC7 because RC6 has some big problems. There is a file CHANGES in ftp://ftp.openca.org/pub/openca/developers/bell/snapshots. If you read the file then you should see that there are a lot of other changes than only OpenCA:DBI-fixes :) > Lastly, is it possible to later convert to a SQL backend, say postgres, > from a standard install, retaining the current data? Hey, this is one of the biggest advantages of OpenCA. OpenCA::DB --> OpenCA::DBI - use OpenCA backup in Input/Output - configure OpenCA::DBI - recover with the method for OpenCA::DB not OpenCA::DBI because OpenCA::DB don't have logs OpenCA::DBI --> OpenCA::DBI (e.g. PostgreSQL --> Oracle) - use OpenCA backup - configure OpenCA for Oracle - make a normal recovery for OpenCA::DBI Please take in mind that if you start trying such a major operation then you should make a backup before. Michael -- ------------------------------------------------------------------- Michael Bell Email (private): [EMAIL PROTECTED] Rechenzentrum - Datacenter Email: [EMAIL PROTECTED] Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482 Unter den Linden 6 Fax: +49 (0)30-2093 2959 10099 Berlin Germany http://www.openca.org ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
