Hi Roberto,
If I understand, what you want to do is to automate the certificate
generation.
It's what I want. I want to generate the key pair and the CSR on the client
side (IE, Netscape,...), send all the infos to the RA via the pub gateway,
issue the certificate with the CA and retrieve the certificate in the
browser.
I manage to do this thanks to a Java servlet that makes 3 http connections
(the first one to the pub, the second to the CA and the last one to the
pub). To do this I use the same mysql DB for CA and RA, so the request
comming from the pub, is directly in the CA DB, ready to be signed.
But, the problem is the time : it takes more than 1 minute to issue a
certificate. So, what I want to do is to write a script that makes the 3
requests with the good parameters in order to have only one script to call
from the browser.
Is it the script you want to write ?
In my case, all the controls are made before, I use OpenCA only to issue
certificates and to stock them in a LDAP so I don't use the RA
functionnality to approve CSR. I sign CSR without approved them by the RA.
Florent
Roberto Hoyle
<[EMAIL PROTECTED] Pour : [EMAIL PROTECTED]
U> cc :
Envoy� par : Objet : Re:
[Openca-Users] Single database for CA and RA
[EMAIL PROTECTED]
ceforge.net
30/06/2004 15:50
Veuillez r�pondre �
openca-users
Oliver Welter wrote:
> oooh ugly - I see 2 possible approaches:
> 1) Run a cron job that signs the certs - so the users have some minutes
> delay
>
> 2) rewrite a huge part of the scripting - I think what you want is not
> easy...at least not with OpenCA itself..
I was hoping to grab all the commands required to approve a cert and see
if I can issue them one at a time by a single script.
r.
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
___
Ce message est strictement confidentiel. Son int�grit� n'est pas assur�e
sur Internet. Le contenu de ce message ne peut engager la responsabilit� du
groupe Atos Origin. Si vous n'�tes pas destinataire du message, merci d'en
avertir imm�diatement l'exp�diteur et de le d�truire.
Bien que les meilleurs efforts soient faits pour maintenir cette
transmission exempte de tout virus, l'exp�diteur ne donne aucune garantie �
cet �gard et sa responsabilit� ne saurait �tre engag�e pour tout dommage
r�sultant d'un virus transmis.
This e-mail is privileged and may contain confidential information intended
only for the person(s) named above. If you receive this e-mail in error,
please notify the sender immediately by telephone or return e-mail.
Although the sender endeavours to maintain a computer virus free network,
the sender does not warrant that this transmission is virus-free and will
not be liable for any damages resulting from any virus transmitted.
-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 -
digital self defense, top technical experts, no vendor pitches,
unmatched networking opportunities. Visit www.blackhat.com
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
