RE: [Openca-Users] I install OpenCA but

[Obes, Til]

> Well for the moment I can browse the web site /cgi-bin/ca/ca
> I run all the step in Initialize the Certification Authority
>   but in 
> But when I execute openca_start I recive the following error
>  locale cannot read character map directory �/usr/share/i18n/charmaps�
>  No such file or directory
> 
It seems you have to make the locale language files


> When I try ti execute /cgi-bin/ra/RaServer appear the following error
>  6251026 aborting connection' you are using a wrong security protocol
>  http
> I read the FAQ in the web site www.openca.org but I don�t know how to
> solve this.

OpenCA/etc/rbac/access_control/ra.xml.template

<openca>
    <access_control>
        <channel>
            <type>mod_ssl</type>
            <protocol>ssl</protocol>
            <source>.*</source>
            <asymmetric_cipher>.*</asymmetric_cipher>
            <asymmetric_keylength>0</asymmetric_keylength>
            <symmetric_cipher>.*</symmetric_cipher>
            <symmetric_keylength>128</symmetric_keylength>
        </channel>
....

With this config you have to use ssl with 128 key length

<openca>
    <access_control>
        <channel>
            <type>mod_ssl</type>
            <protocol>.*</protocol>
            <source>.*</source>
            <asymmetric_cipher>.*</asymmetric_cipher>
            <asymmetric_keylength>0</asymmetric_keylength>
            <symmetric_cipher>.*</symmetric_cipher>
            <symmetric_keylength>.*</symmetric_keylength>
        </channel>
 ....

With this config you can use any protocol with any keylength.
But do this only for testing ;)

Regards til

smime.p7s
Description: S/MIME cryptographic signature