I built and installed 0.9.1-RC7
using:
openssl-0.9.7-stable-SNAP-20021020
perl 5.6.1
apache 1.3.27 w/mod_ssl 2.8.11
openldap 2.0.25
My problems are as follows:
Trying to download the "download certificate onto token" results in a
malformed header error. Both Michael and Massimiliano replied to my recent
query and I thank them for their response. Unfortunately, the answer lead
to more questions such as what happened to certain files and directory
structures.
The entire htdocs/pub does not exist and excludes the ability of "memorizing
the serial number for the certificate" as outlines in Michaels response.
Additionally, a problem that I was going to tackle separately was LDAP.
Now, I'm an old hand at ldap - so I'm not afraid of it. When the program
didn't automatically set it up, I found the ldap template in the
contribs/openldap file as mentioned in the OpenCA Guide and initiated the
LDAP root with it. It's firmly in there and I have checked access to it
locally and remotely. It's quite happy. But as far as I can tell, the
service isn't even trying to introduce the certificates into LDAP.
I am providing my configuration options here for your perusal. Please let
me know if I have over looked any configurations that should have been made:
###################################################
#!/bin/sh
PREFIX=$1
VER=0.9.1
if [ -z "${PREFIX}" ] ; then
PREFIX=/usr/local/openca.${VER}
fi
./configure \
--prefix=${PREFIX} \
--with-openca-prefix=${PREFIX}/openca \
--with-etc-prefix=${PREFIX}/openca/etc \
--with-httpd-fs-prefix=${PREFIX}/httpd \
--with-module-prefix=${PREFIX}/modules \
--with-openssl-prefix=/usr/local/ssl \
--with-engine=no \
--with-web-host=certificates.mediaserve.net \
--with-httpd-user=www \
--with-httpd-group=www \
--with-ca-organization="BroadspireCA" \
--with-ldap-root="cn=Manager,o=BroadspireCA,c=US" \
--with-ca-country=US \
--with-ca-locality=LosAngeles \
--with-ldap-port=389 \
--with-ldap-root-pwd="xxxxxxx" \
--enable-update-ldap-automatic \
--enable-ocspd \
--enable-db \
--disable-rbac \
--with-service-mail-account="[EMAIL PROTECTED]"
#######################################################
-------------------------------------------------------
This sf.net emial is sponsored by: Influence the future
of Java(TM) technology. Join the Java Community
Process(SM) (JCP(SM)) program now.
http://ad.doubleclick.net/clk;4699841;7576301;v?http://www.sun.com/javavote
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
