Alexey Chetroi wrote:
 Hello,

 I'm a newbie to openca, so sorry in advance for
the dumb questions :)

 I'm playing around with openca, wanting to setup some
kind of CA, which would include 2 machines: one for CA and
another one for RA and PUB components. But a bit confused
by a --with-hierarchy-level configure option. What it should
be for a CA machine and RA machine.
 For test setup I install openca in different directories with
apache configured for virtual servers on different ip addreses.
Every OpenCA PKI has an internal hierarchy of databases. There are two levels in your situation - ca and ra. The levels are relevant for the export and import of objects from the databases (dataexchange) because there are some mechanisms to avoid status and illegal data injections from lower levels into higher levels of the hierarchy. If you install the CA then you must use --with-hierarchy-level=ca and if you install the RA and PUB then you must use --with-hierarchy-level=ra.

PS: could somebody advice links for newbies in CA?
Our first steps on the way to a documentation:

ftp://ftp.openca.org/pub/openca/developers/bell/doc/

Michael
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org



-------------------------------------------------------
This SF.NET email is sponsored by: Thawte.com
Understand how to protect your customers personal information by implementing
SSL on your Apache Web Server. Click here to get our FREE Thawte Apache Guide: http://ads.sourceforge.net/cgi-bin/redirect.pl?thaw0029en
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to