(also in reply to Ives)
Yeah, the version I'm using is from 0.9.2 in CVS about two weeks ago. 
It wasn't an ownership thing, I changed the owner in my install script. 
Never mind, it's clearly something to do with my particular version or
configuration.  I'm going to install a fresh version from the
openca-0.9.2-rc5 tarfile.

I have some questions though, 
1. does anyone still use this script:
/usr/local/openca-0.9.2/bin/openca-getitem

2. If a web server generates a request, and submits the CSR, an openssl
config file somewhere is used to configure the eventual certificate. 
Which file is used? 
openca-0.9.2/etc/openssl/openssl/Web_Server.conf  or 
openca-0.9.2/etc/openssl/extfiles/Web_Server.conf
None of those files appear to be configured differently to openssl.cnf
though..?

3. I don't want to have much info recorded for each request.  I don't
particularly even want email addresses recorded, but it seems to break
the database if I try to use only CN,O,C for the RA machine.  (by making
everything else optional, and leaving them blank).  Anyone have any
ideas about what exactly is needed, and what isn't?

Thanks,

Damon


On Thu, 2004-07-22 at 22:51, Tiller, Robert wrote:
> In the cvs from last Friday, the db files for ca were owned by root
> instead
> of wwwrun.www which would barf on the db init phase 1.  A chown command
> fixed this.
> In the cvs from last night, the openca_start command barfed on some kind
> of "unknown db lib" error when trying to start the ra.  I can 
> send in the exact error later today.
> 
> thanks!
> Robert
> 
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Damon
> Smith
> Sent: Thursday, July 22, 2004 2:34 AM
> To: [EMAIL PROTECTED]
> Subject: [Openca-Users] db file mode
> 
> Hi, I've been installing and reinstalling openca-0.9.2, and I was having
> lots of trouble with the database.  I even hacked one of those perl
> scripts to list the contents of my db, just to see if it was working,
> and the openca db files in /var/db directory weren't readable. (perl
> wouldn't say why)
> So anyway, I tried again using mysql, and it works really well.  I don't
> know if many others out there are trying to use db files, but I don't
> think they're working very well in the version I've got.
> 
> Damon
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users
> 
> 
> 
> 
> -------------------------------------------------------
> This SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_idG21&alloc_id040&op=click
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users
> his SF.Net email is sponsored by BEA Weblogic Workshop
> FREE Java Enterprise J2EE developer tools!
> Get your free copy of BEA WebLogic Workshop 8.1 today.
> http://ads.osdn.com/?ad_idG21&alloc_id040&op=click
> _______________________________________________
> Openca-Users mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/openca-users



-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=4721&alloc_id=10040&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to