On Tue, 9 Mar 2004, chris Guenther wrote:

> Hi and thanks for your answer,

you're welcome


> I received this error and - naturally - the ca is still
> not working [...]
> Error while loading configuration
> (/var/lib/OpenCA/etc/servers/common.conf)!

to be honest I don't know why you receive this error. a part from one
obvoius reason: there is no such file.


> I'm kind of getting stuck here. I tried to follow the directions
> from wallus.txt [...]

note that wallus.txt has a line:

"Everything, which I describe here, is for SuSE8.1 and openca 0.9.1"

so this file for sure is very helpful but might not be the best
step-by-step instruction for you.

> [...]So far, as I see it I might have some deep understanding problem
> here. Can anyone point me to some easy to understand and straight
> to the point documentation?

hmmm... ok, let's try this way: I also use debian sarge (btw: sarge is
not 3.0) and what I have done so far is:

1. install bare sarge (if you wish to receive my 'dpkg -l' to compare it
to yours @mail me)

2. wget sources of openssl-0.9.7c mm-1.3.0 mod_ssl-2.8.16-1.3.29 and
apache_1.3.29 (I prefere building them from sources)

3. ungzip'ed and untar'ed them into /usr/local/src/ and then:
cd /usr/local/src
cd openssl-0.9.7c && ./config && make && make test && make install
cd ../mm-1.3.0 && ./configure --disable-shared && make
cd ../mod_ssl-2.8.16-1.3.29 && ./configure &&
--with-apache=../apache_1.3.29 && --with-ssl=../openssl-0.9.7c &&
--with-mm=../mm-1.3.0 && --prefix=/usr/local/apache
cd ../apache_1.3.29 && make && make certificate && make install

4. wget openca src (it was rc2 but you might want to get rc3 which is
'out-there'), ungziped it, untared it into /usr/local/src

5. install some additional pakckages that openca requires to build
correctly:
apt-get install libldap2-dev libxml-parser-perl libgdbm-dev libdb4.2-dev

6. 'dpkg-reconfigure locales' to make sure my language will be suported
(I marked pl_PL ISO-8859-2 and de_DE ISO-8859-1)

7.
cd /usr/local/src/openca-sources
./configure \
  --with-engine=no \
  --with-httpd-user=nobody \
  --with-httpd-group=nogroup \
  --with-openca-user=openca \
  --with-openca-group=openca \
  --with-httpd-fs-prefix=/usr/local/apache \
  --with-cgi-url-prefix=/cgi-bin \
  --with-web-host=jargot.nask.waw.pl \
  --with-ca-organization="NASK" \
  --with-ca-country=PL \
  --with-ca-locality=Warszawa \
  --with-openssl-prefix=/usr/local/ssl \
  --enable-db \
  --disable-dbi \
  --enable-rbac \
  --disable-ocspd \
  --disable-openscep \
  --with-db-name=openca \
  --with-db-user=openca \
  --with-db-passwd="*******" \
  --with-ldap-port=389 \
  --with-ldap-root="cn=Manager,o=NASK,c=PL" \
  --with-ldap-root-pwd="*******" \
  --prefix=/usr/local \
  --with-service-mail-account="[EMAIL PROTECTED]" \
  --with-language=pl_PL \
  --with-hierarchy-level=ca

ofcourse this is test instalation, so hostnames and [EMAIL PROTECTED] are temporary

and then make, make install-online (for ra, ldap, pub, scep and node) or
install-offline (ca and node) (note to set '--with-hierarchy-level='
properly in this cases).

and then vi config.xml and so on (I think you know what next, more or
less).

as you might have noticed I don't use mysql neither postgresql - set
corresponding options to meet your situation.

after that I have openca up and running. still get some (minor) errors.


I didn't try using openca .deb packages so far. I assume you did
neither.


don't give up. we all have problems installing openca but sooner or
later they all pass away ;)


p.s. I'm not developer neither advanced user, so my knowledge might be
note enough to help you.


-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-
  F.Lewenda                               [ one 'logout' too far... ]
-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to