Hello,
we have some problems to get the contents of our current ca into the new version 0.9.2.1, especially into the ra/pub server.
Our current ca and combined ra+pub servers use openca 0.9.1.8 on RedHat
The new ca and combined ra+pub servers are installed on new machines with openca 0.9.2.1 on SuSe 9.2
Now we need to transfer the already existing certificates, requests etc. from the old machines to the new ones.
First we tried to accomplish this with a backup/restore from old ra to new ra, but the database was still empty afterwards, though there were no error messages shown.
Then we tried a crash recovery as mentioned in the docs by exporting (enroll) all data from the old ca and import (download) into the new ra.
(... Go to OPENCADIR/var/log/enroll and OPENCADIR/var/log/download. There you have to remove all data from files which contain the module ID of the node interface on the online server which crashed. If you run the import/export commands next time then all objects will be exported again. It is the same technology like for the creation of a new node interface...)
That way, empty cacert.der and cacert.pem files were copied into var/crypto/cacerts, producing one error message that installing the ca certificates failed. The database remained empty.
How can we transfer the existing data from our old server to the new one?
Are there changes to the backup file structure or something that prevent
the restore from working?!
Do we have to make some manual adjustments to the backup file?
Or do we have to install the old version, transfer the data and finally do a version update over the installed software?
Thanks for any help!
Regards, Elke
------------------------------------------------------- The SF.Net email is sponsored by: Beat the post-holiday blues Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek. It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
