Hi FLorent,

[EMAIL PROTECTED] wrote:

You say that after signing the CSR by the RA, I can start some automatic
processing. Could you explain me how can I automate the dataexchange
between 2 nodes on the same machine ? I saw that we can do that with "scp"
if the nodes are on 2 different machines but nothing if the nodes are on
the same machine.

The simplest way is not to do any exchange but use one database for CA, RA and Pub.
Otherwise you just can edit the "node.conf" and set the IMPORT_EXPORT Device to a filename on your system. Make sure that your webserver has the right to write to this destination ! You still have to click throgh both node interfaces and activate the im/export.
It sould also be possible to write a perl Script that directly calls the xchange routines......

And how can I automate the CSR signature by the CA to create the
certificate ?

CA -> Batchsystem -> Issue Certs, then you must select the corresponding roles of operator and requester.

Have you ever tried to use client side keygen with the batch process ? Or
else, as you say, I'm going to try to write a new process.

No I have not, I will do so in some weeks, because I need some special enrollment procedures too....

Oliver


-- Diese Nachricht wurde digital unterschrieben oliwel's public key: http://www.oliwel.de/oliwel.crt Basiszertifikat: http://www.ldv.ei.tum.de/page72

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature



Reply via email to