Hi Oliver,

Thanks for your quick response...
 
> A restart of the Daemon should rebuild the cache - take care that the 
> daemon-process really dies and starts up agani - I always recommend
> openca_rc stop
> ps ax | grep openca - hopefully nothing is shown
> openca_rc start

That's what I did a couple of times now - you can see the results e.g. using 
http://ca.rzg.mpg.de/reqs.php with Firefox and
selecting "automatic browser detection". On the page where the <keygen> should 
be there is a <textarea> which was formerly used to
inject SPKAC requests of the former CA. Now I copied the old file back to 
basic_csr (stock file of the openca 0.9.2 dist). There is
definately no "<textarea>" in the basic_csr file anymore... even doing an:

ca:/var/ca-rzg # fgrep -ir "<TEXTAREA NAME=\"newkey" *

results in no files found... actually browsing the page 
(http://ca.rzg.mpg.de/cgi-bin/pub/pki?cmd=basic_csr) <TEXTAREA
NAME="newkey"> is referenced in the HTML source... as if it'd be cached 
somewhere in a different form... I cleared the browser cache
and used other computers resulting in the same error - though it's highly 
impossible that the CGI output was cached on the client
side - there are no proxy servers between client and server either...

Seems as if OpenCA isn't that easy to customize...

Sebastian Rieger

Gesellschaft f�r wissenschaftliche Datenverarbeitung mbH G�ttingen 
Am Fassberg - 37077 G�ttingen
Fon: +49 551 201 1878 -- Fax: +49 551 201 21119

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to