it is perfectly possible, but the OpenCA group do not recommend this - because the CA contains alot of sensetive information, and the best connectivity option for security is.....no connectivity.
If you MUST put them on the same device ( as I had to ) I would recommend using seperate partitions for the CA and the rest - this will allow you to lock one down to read only whilst write access is not required - it also provides "logical" speration. for my install I used /pki for the RA/ext etc and /pkica for my CA - choose a better place than this!!! If you are using mysql databases, ensure that you create 2 seperate databases ( I used openca and opencara ) and granted access seperatly to them ( Mysql GRANT ). I chose to do the CA compile/install first - ensure you change the configure options to select the correct database....You must ensure this seperation is performed or the CA and RA will try to initialize the same DB - bad!!!!! You can leave a floppy disk in the drive for the transfer of data from RA <-> CA or you can change the existing entries for /dev/fd0 to use tar or SSH or even cp...... Good luck ----- Original Message ----- From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, May 28, 2003 3:36 PM Subject: [Openca-Users] Question Hi everybody!! I'm a new user of OpenCA project Finally I could install OpenCA after a lot of attempts I have compiled and installed CA and now I have a big question Is it possible compile and install both CA and RA on the same computer?? If this is possible ... what do I consider for make this? I'm working for a PKI project on Intranet and just have one linux PC with Red Hat 7.2 Thanks Carlos R Zainos ------------------------------------------------- Obtén tu correo en www.correo.unam.mx UNAMonos Comunicándonos ------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
