Hi Mike, I don't have a current backup of the database so how do I get the previous certificates into the database?
Dave Blaine > From: Michael Bell <[EMAIL PROTECTED]> > User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.3.1) Gecko/20030609 > X-Accept-Language: en-us, en > MIME-Version: 1.0 > To: [EMAIL PROTECTED] > Subject: Re: [Openca-Users] Database recovery after accidental init > Content-Transfer-Encoding: 7bit > X-Virus-Scanned: by amavisd-new at hu-berlin.de > X-Spam-Score: 0.0 (/) > X-Spam-Report: Spam Filtering performed by sourceforge.net. See http://spamassassin.org/tag/ for more details. Report problems to https://sf.net/tracker/?func=add&group_id=1&atid=200001 > X-BeenThere: [EMAIL PROTECTED] > X-Mailman-Version: 2.0.9-sf.net > List-Help: <mailto:[EMAIL PROTECTED]> > List-Post: <mailto:[EMAIL PROTECTED]> > List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, <mailto:[EMAIL PROTECTED]> > List-Id: Ideas, tips and discussions about OpenCA installation and management. <openca-users.lists.sourceforge.net> > List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/openca-users>, <mailto:[EMAIL PROTECTED]> > List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum=openca-users> > X-Original-Date: Mon, 24 Nov 2003 14:40:50 +0100 > Date: Mon, 24 Nov 2003 14:40:50 +0100 > > David W. Blaine wrote: > > > I've been working way too long on these CA's and accidentally init'd the wrong > > one - my root CA! I have the initial configuration backed up but little else. :( > > Is there a way to re-import the CA certs and user certs I have? > > 1. Do you have the CA key? > 2. Do you have the CA cert? > 3. Do you have a backup from your database? > > If the answer is three times yes then you can recover your installation. > > 1. Install OpenCA > 2. Copy cakey.pem to the appropriate position var/crypto/keys/cakey.pem > 3. tar -cf /dev/fd0 cacert.pem > 4. use the first initialization phase of OpenCA > 4.1. init database (use the default link) > 4.2. recover CA cert > step 4 - issuing CA cert > --> signed from another CA > --> import CA cert signed by another CA > > This is not a mistake!!! This copies the cert to the correct > positions and performs all the transformations to the different > formats. > 5. build the chain > 6. go to the node interface > 7. recovery > 8. import database > 9. rebuild OpenSSL files > > I hope this helps you. > > Michael > -- > ------------------------------------------------------------------- > Michael Bell Email: [EMAIL PROTECTED] > ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 > (Computing Centre) Fax: +49 (0)30-2093 2704 > Humboldt-University of Berlin > Unter den Linden 6 > 10099 Berlin Email (private): [EMAIL PROTECTED] > Germany http://www.openca.org > > > > ------------------------------------------------------- > This SF.net email is sponsored by: SF.net Giveback Program. > Does SourceForge.net help you be more productive? Does it > help you create better code? SHARE THE LOVE, and help us help > YOU! Click Here: http://sourceforge.net/donate/ > _______________________________________________ > Openca-Users mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Openca-Users mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/openca-users
