Hello dalini,

thanks for your response,

[EMAIL PROTECTED] schrieb am 02.08.04 17:45:15:
> 
> Gregor Bethlen wrote:
> 
> > I hope my problem is clear. Any hints?
> > 
> as far as i have this in mind from some discussions
> the module-ids are dependent per CA - this is my understanding of it
> 
> this means if your structure consists of more then one
> CA every has its own universe (openca-system) independently from
> each other
> 
> so the only connection between is - that the root-ca signs the
> sub-ca certs - thats all
> 
> so every ca - can have module id 0 and so on...


OK, this may be. But what happens when you do a dataexchange? The first cert the 
rootca approves get serial 1 (module id == 0). The first cert the subca1 approves get 
serial 1 (module id == 0). Same with subca2. As long as you don't exchange up to the 
rootca and then down to both subcas, this could work. But I have some doubts if you 
can have more certs with the same serial in one place (even if they are signed by 
different cas). But I don't know.

Thanks again for your response,

Gregor
____________________________________________________
Aufnehmen, abschicken, nah sein - So einfach ist 
WEB.DE Video-Mail: http://freemail.web.de/?mc=021200



-------------------------------------------------------
This SF.Net email is sponsored by OSTG. Have you noticed the changes on
Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now,
one more big change to announce. We are now OSTG- Open Source Technology
Group. Come see the changes on the new OSTG site. www.ostg.com
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to