[EMAIL PROTECTED] wrote:

1-4 are already answered

5. Support for multiple character sets (for international languages)?

0.9.1 and earlier support different languages via the installation of different interfaces. The next release (0.9.2) supports all languages (which are available) on every installed interface. If you see the english interface click on language and then choose your language. If you need a language then you must translate at minimum the language file. We use gettext.


I think 6-8 are answered already. 9 is an issue for Max.

10. Scalability and Performance of OpenCA (Maximum number of certificates
which can be issued and the issuance rate e.g. 10 certs/min)

0.9.1 has problem if you operate on levels of thousands of users. We try to optimize this in 0.9.2. Today the CVS head is 2-3 times faster than 0.9.1 on my notebook.


11. Can OpenCA support distributed RAs / distribued servers to handle large
capacity loads.? If this supports multiple levels of CAs and RAs
then is there a limitation for the depth of these levels.

First every CA is completey seperate from the others. We don't support an integrated architecture of several CAs like Baltimore. Sub CAs are of course no problem (I operate one root and two sub CAs). You can create a hierarchy of database in every OpenCA architecture. E.g.


1 offline CA
3 online RAs in DMZs
6 public interfaces in a completely unprotected area

The different interfaces would have seperated databases. You must do a careful definition of the export/import system to avoid statusinjection into your hierarchy but this you must do for every customized hierarchical system.

A much more important advice because HSBC is a bank. OpenCA 0.9.1 has no logging and 0.9.2 will only have a first imlementation of logging. This implementation logs all accesses to the PKI but has deficits at the area of what was really changed.

Best regards

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to