On Wed, 2008-11-05 at 13:18 +0100, Ralf Hornik Mailings wrote:
> Hi List,
> 
> an easy way to upgrade (worked for me):
> 
> 1. make a backup using openca backup tool from your old ca
> 2. backup cacert.pem and cacrl.pem, cakey and openssl extfiles (if modified)
> 3. make a fresh install of OpenCA 1.x
> 3a create new databases if needed
> 4. configure the openca 1.x installation (config.xml)
> 5. recover the backup into OpenCA 1.0x using the backup tool from OpenCA 1.x
> 6. recover cacert.pem and cacrl.pem, cakey and extfiles (if modified)  
> to OpenCA 1.x
> 
> NOTE: The CDP may change since OpenCA 1.0 uses different Web Uri's!  
> You have to solve this by yourself!
> 
> Good Luck!
> 
> Regards
> 
> Ralf
Thank you, Ralf.  I am in the midst of doing this myself.  The
restoration appear to be flawless but I am finding a problem recognizing
new CSRs and signing old CRRs.  This could be a configuration error on
my part and I will be investigating later this week.

There is a change in the database schema.  I've not yet examined the
actual data to see if it is an issue.  I don't recall the column names
off hand but the crl table previously used text type columns for
crl_key, next_date, and issued_date.  Version 1.0.2 uses bigint types.
At least this is true for Postgresql.
-- 
John A. Sullivan III
Open Source Development Corporation
+1 207-985-7880
[EMAIL PROTECTED]

http://www.spiritualoutreach.com
Making Christianity intelligible to secular society


-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to