Hi John, actually the signature generation (PKCS#7) via browser has errors in the 1.0.x version. We already have the patch but we have not released it yet. You can find more information from the WiKi website:
http://www.openca.org/wiki/
Go to the OpenCA 1.0.x bug fix section.
Later,
Max
John A. Sullivan III wrote:
On Wed, 2008-11-05 at 13:18 +0100, Ralf Hornik Mailings wrote:Hi List, an easy way to upgrade (worked for me): 1. make a backup using openca backup tool from your old ca 2. backup cacert.pem and cacrl.pem, cakey and openssl extfiles (if modified) 3. make a fresh install of OpenCA 1.x 3a create new databases if needed 4. configure the openca 1.x installation (config.xml) 5. recover the backup into OpenCA 1.0x using the backup tool from OpenCA 1.x6. recover cacert.pem and cacrl.pem, cakey and extfiles (if modified) to OpenCA 1.xNOTE: The CDP may change since OpenCA 1.0 uses different Web Uri's! You have to solve this by yourself!Good Luck! Regards RalfThank you, Ralf. I am in the midst of doing this myself. The restoration appear to be flawless but I am finding a problem recognizing new CSRs and signing old CRRs. This could be a configuration error on my part and I will be investigating later this week. There is a change in the database schema. I've not yet examined the actual data to see if it is an issue. I don't recall the column names off hand but the crl table previously used text type columns for crl_key, next_date, and issued_date. Version 1.0.2 uses bigint types. At least this is true for Postgresql.
--
Best Regards,
Massimiliano Pala
--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] [EMAIL PROTECTED]
[EMAIL PROTECTED]
Dartmouth Computer Science Dept Home Phone: +1 (603) 369-9332
PKI/Trust Laboratory Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------
People who think they know everything are a great annoyance to those of us
who do.
-- Isaac Asimov
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________ Openca-Users mailing list Openca-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-users
