Hello guys,

we have a project where I need to issue _lots_ of certificates, so I am
testing things out with the Batch Processors. Since I tested last time
(10,000 certs created using batch processors) I have moved up to OpenCA
0.9.1-7 and now run the system on Apache 2.0.48 and openssl 0.9.7a (as
provided by Fedora in RPM).

My problem is that I go through all the usual batch processes to create
keys pairs, approve etc. Then when I get to issue the certs (i.e. sign
them with the CA key) the BP completes 5 certs and then hangs. It is
always 5, no more no less !

I can see the "openssl ca" command when I do a "ps" at the command line.
If I kill the "openssl ca" command, I get the appropriate error on the
OpenCA screen (that it has received a kill -9) and it goes on to the
next cert, which also hangs. If I kill each command in turn, in the end
the batch process finishes and the certs are written to the database.

If I do a BP of less that 5 certs at a time, then the process works
perfectly.

Can anyone think what is going on ? I can't believe there is a limit on
OpenSSL, especially as is it being called per cert request.

Help please.

Chris...



-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to