Hi Oliver,
Thanks for your response.
So, for the moment, the only way to automate the dataexchange between 2
nodes (and with 2 different databases : 1 for CA and 1 for RA/ldap/pub), is
to write a perl script that calls dataexchange commands. Or else, I have to
use the same DB for the CA and the RA.
I'm waiting for your client side keygen batchprocess :) !
Florent
Oliver Welter
<[EMAIL PROTECTED]> Pour : [EMAIL
PROTECTED]
Envoy� par : cc :
[EMAIL PROTECTED] Objet : Re: [Openca-Users] Full
automatic enrollment
ceforge.net
07/06/2004 17:12
Veuillez r�pondre �
openca-users
Hi FLorent,
[EMAIL PROTECTED] wrote:
> You say that after signing the CSR by the RA, I can start some automatic
> processing. Could you explain me how can I automate the dataexchange
> between 2 nodes on the same machine ? I saw that we can do that with
"scp"
> if the nodes are on 2 different machines but nothing if the nodes are on
> the same machine.
The simplest way is not to do any exchange but use one database for CA,
RA and Pub.
Otherwise you just can edit the "node.conf" and set the IMPORT_EXPORT
Device to a filename on your system. Make sure that your webserver has
the right to write to this destination ! You still have to click throgh
both node interfaces and activate the im/export.
It sould also be possible to write a perl Script that directly calls the
xchange routines......
> And how can I automate the CSR signature by the CA to create the
> certificate ?
>
CA -> Batchsystem -> Issue Certs, then you must select the
corresponding roles of operator and requester.
> Have you ever tried to use client side keygen with the batch process ? Or
> else, as you say, I'm going to try to write a new process.
No I have not, I will do so in some weeks, because I need some special
enrollment procedures too....
Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat: http://www.ldv.ei.tum.de/page72
___
Ce message est strictement confidentiel. Son int�grit� n'est pas assur�e
sur Internet. Le contenu de ce message ne peut engager la responsabilit� du
groupe Atos Origin. Si vous n'�tes pas destinataire du message, merci d'en
avertir imm�diatement l'exp�diteur et de le d�truire.
Bien que les meilleurs efforts soient faits pour maintenir cette
transmission exempte de tout virus, l'exp�diteur ne donne aucune garantie �
cet �gard et sa responsabilit� ne saurait �tre engag�e pour tout dommage
r�sultant d'un virus transmis.
This e-mail is privileged and may contain confidential information intended
only for the person(s) named above. If you receive this e-mail in error,
please notify the sender immediately by telephone or return e-mail.
Although the sender endeavours to maintain a computer virus free network,
the sender does not warrant that this transmission is virus-free and will
not be liable for any damages resulting from any virus transmitted.
-------------------------------------------------------
This SF.Net email is sponsored by: GNOME Foundation
Hackers Unite! GUADEC: The world's #1 Open Source Desktop Event.
GNOME Users and Developers European Conference, 28-30th June in Norway
http://2004/guadec.org
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
