Craig McGregor wrote:

Other observations:
CA & RA need to use the same SQL database (which makes an air gap separation
impossible). If it used db instead of dbi would this work? [Database is not
updated when it imports the reqs]
I think there is a misunderstanding of the export-/import-technology. The RA and CA can use of course another SQL-database than the CA. Why do you think they must use the same SQL-database? What do you mean with [Database is not updated when it imports the reqs]?

RA --> CA (e.g. requests)

online-webinterface: export requests
ca-webinterface: import requests

CA --> RA (e.g. certificates)

ca-webinterface: export certificates
online.webinterface: import certificates

I also get an error 700 cannot import req when attempting to approve (and create
token key pairs). Any ideas what might be wrong?
Please describe exactly what your are doing. Tokenrequests work like follows:

1. the user creates such a request (means he want a smartcard)
2. the RA Operator uses a new smartcard with it's IE or Netscape
3. the RA Operator generates the keys and the real request with the smartcard
4. now it works like a normal request

Best regards

Michael
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org



-------------------------------------------------------
This sf.net email is sponsored by: viaVerio will pay you up to
$1,000 for every account that you consolidate with us.
http://ad.doubleclick.net/clk;4749864;7604308;v?
http://www.viaverio.com/consolidator/osdn.cfm
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users


Reply via email to