Giovanni Pedone wrote:
Hi all,
Has anyone of you tried to install, configure, and use OpenCA using the
dc-style?
(i.e. "dc=university,dc=edu", instead of "o=UCLA,c=US")

This means several things:
1- modifying LDAP config
2- modifying OpenCA configuration for requests.
3- modifying OpenSSL config file
4- modifying some other OpenCA files

Does all of this actually work ?

Yes, 0.9.1 is required.


At point 4, it includes modifications of some "main.html" files, but I can
see there are also some javascripts with references to O, C style:

flashgordon:/srv/ra/apache/htdocs # grep -R 'O=' .
./ra/scripts/getParams.js:   theForm.dn.value += ", O=" + tmp;
./ra/scripts/getParams.js:   theForm.dn.value += "O=" + tmp;

flashgordon:/srv/ra/apache/htdocs # grep -R 'C=' .
./ra/scripts/getParams.js:   theForm.dn.value += ", C=" + tmp;
./ra/scripts/getParams.js:   theForm.dn.value += "C=" + tmp;
./ldap/scripts/getParams.js: theForm.dn.value += ", C=" + tmp;
./ldap/scripts/getParams.js: theForm.dn.value += "C=" + tmp;

These files were not changed! This code is only necessary for the generation of the CA request. If you simply click ok until you get the complete DN and then change the DN to a DC-style dn then all works fine.


The documentation of 0.9.1 is really poor but the included OpenCA guide includes a short section which describes what to do if you want to use DC-style.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to