we have found it useful to have the CRL as a seperate sub domain from the ra domain. To do this I edit the .ext files of the certificates before issuing them. It would be really handy to have a new configure option of "with-crl-host" which defaults to "with-web-host" if not specified. Then in the "*.ext.in" files have the placeholders pointing at the CRL reference.
What do you think ?
Really nice. How often do you take a look at the CVS HEAD ;-) cvs log config.xml:
revision 1.14 date: 2003/06/30 14:10:32; author: michaelbell; state: Exp; lines: +7 -7 - removed navbar.html* - removed logging from OpenCA::DBI / - added CDPs to config.xml.in <==================== - small fixes for new states \
An example of this is:
RA URL = openca-ra.company.com
CRL = crl.company.com
No problem - from config.xml.in:
<!--
You can add more CDPs here. Please enter one CDP per line.
This is the content of an OpenSSL configuration section.
Example:
URI.1=http://cdp1.xyz.de/pub/crl/cacrl.crl
URI.2=ldap://cdp2.xyz.de/cn=CA,ou=Trustcenter,o=XYZ,c=DE
URI.3=http://cdp2.xyz.de/pub/crl/cacrl.crl
URI.4=ldap://cdp1.xyz.de/cn=CA,ou=Trustcenter,o=XYZ,c=DE
-->(We add no new features to 0.9.1 because it is frozen.)
PS I still have the installation problem if I set the "with-httpd-url-prefix=/" where many of the URL's in the code end up just pointing to "https://ra_node"; rather than "https://my.domain.com/ra_node";, any ideas ?
Can you give some example filenames? (e.g. src/xyz has a correct URL and src/abc has a wrong URL)
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
------------------------------------------------------- This SF.net email is sponsored by Dice.com. Did you know that Dice has over 25,000 tech jobs available today? From careers in IT to Engineering to Tech Sales, Dice has tech jobs from the best hiring companies. http://www.dice.com/index.epl?rel_code=104 _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
