David W. Blaine wrote:

I've been working way too long on these CA's and accidentally init'd the wrong one - my root CA! I have the initial configuration backed up but little else. :( Is there a way to re-import the CA certs and user certs I have?

1. Do you have the CA key? 2. Do you have the CA cert? 3. Do you have a backup from your database?

If the answer is three times yes then you can recover your installation.

1. Install OpenCA
2. Copy cakey.pem to the appropriate position var/crypto/keys/cakey.pem
3. tar -cf /dev/fd0 cacert.pem
4. use the first initialization phase of OpenCA
4.1. init database (use the default link)
4.2. recover CA cert
   step 4 - issuing CA cert
   --> signed from another CA
   --> import CA cert signed by another CA

   This is not a mistake!!! This copies the cert to the correct
   positions and performs all the transformations to the different
   formats.
5. build the chain
6. go to the node interface
7. recovery
8. import database
9. rebuild OpenSSL files

I hope this helps you.

Michael
--
-------------------------------------------------------------------
Michael Bell                   Email: [EMAIL PROTECTED]
ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
(Computing Centre)                        Fax:  +49 (0)30-2093 2704
Humboldt-University of Berlin
Unter den Linden 6
10099 Berlin                   Email (private): [EMAIL PROTECTED]
Germany                                       http://www.openca.org



-------------------------------------------------------
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive?  Does it
help you create better code?  SHARE THE LOVE, and help us help
YOU!  Click Here: http://sourceforge.net/donate/
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to