You`re right:


offline: CA interface, node interface, webserver, database
online:  RA interface, node interface, webserver
online:  public interface, node interface, webserver
online:  database(-server)

On the export from RA to Webserver the CRl`s in the OpenCA directory aren't updated.


Regards


Jan


Michael Bell wrote:
Jan Wiebelitz wrote:

Kann man das so wegschicken?


Yes, you can ;)

i've four parts of a CA-Infrastructure:
        CA, RA; SQL-Server and a Webserver.

A CRL generated on the CA is exported to the RA. On the RA the CRL is
pushed into the SQL-database and pushed to the Web-Server.


Stop. You are mixing several thing s here. I think you have the follwoing:

offline: CA interface, node interface, webserver, database
online: RA interface, node interface, public interface, webserver, database


On the Web-Server I've to import the CRL, but if I want to do so I got
the following error-message:

    [...]
    Importiere valid CRL ...

WARNUNG: Das Objekt konnte nicht eingef�gt werden, da es bereits in der Datenbank existiert.

    file:     /usr/local/OpenCA/var/tmp/
    tmp_344/CRL/VALID/0de6....517c13.pem


First I think you mean the online system. Second this is only a warning and no error message. It simply give you the information that this CRL is already present in the system. Perhaps you installed the CA and RA interface on one computer?

I think the Web-Server wants to export the CRL to the SQL-database, but
the CRL is already in the SQL-database, this causes the error-message.


The error message is warning only.

Can I solve this problem through a special configuration or is it a
general problem.


I see no problem and so I see no solution too :)

Michael


-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to