Ives Steglich a �crit :
M.-A. DARCHE wrote:

The last problematic point was that the dataexchange configurations of
both the CA and the RA were not correct.

oh yes, i didn't asked for this, i thought this was 'clear'
hmm we may need to improve documentation a bit, it seemes...


Maybe the "--with-hierarchy-level" configure option could setup the dataexchange configurations in config.xml? Does it seem logical to you? Would that be possible?


one thing to the crl question:
at the ca there is 'common operations' beside the csr and crr options is a: 'issue new crl' option, u have to call this 'by hand' even if you revoke certificates!


the point is, you should even issue one if there are no revoked certificates yet - some clients may need the crl - just to confirm there are no revoked certificates ;)


Thanks for all those details.


Cheers,

--
Marc-Aur�le DARCHE
NUXEO (Paris, France)                     http://nuxeo.com/
Nuxeo Collaborative Portal Server (CPS)   http://www.cps-project.org/
Gestion de contenu web / portail collaboratif / logiciel libre



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_ide95&alloc_id396&op=click
_______________________________________________
Openca-Users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to