Now that I have 1.5.1 running, I've been looking at the database and
the different directories.

1. On my old system, running 0.9.3rc1, I had all the generated
certificates in the crypto/certs in .pem format. After importing, none
of them are there. They are in the database, though. Is this correct?

2. Out of approx 4000 certs (expired, revoked, and valid) in the
database, 462 have "encrypted private key" in the data field of the
certificate table, the others don't. This is the same with 0.9.3. Why
is this?  And where is the encrypted private key for the rest? The
request table has the same information - no private key on most of the
requests. Most of the certs are created via scep.

3. How can we use user certs to authorize the web interface usage? I
noted in the comments that the serial number of the certt becoes the
user id, but where do we set the user id that are allowed? The
comments seem to indicate that this is done in the acls, but there is
no example of how to do this.



-- 
Mike SCHMIDT
CTO
Intello Technologies Inc.
mike.schm...@intello.com
Canada: 1-888-404-6261 x320
USA: 1-888-404-6268 x320
Mobile: 514-409-6898
www.intello.com

------------------------------------------------------------------------------
Rapidly troubleshoot problems before they affect your business. Most IT 
organizations don't have a clear picture of how application performance 
affects their revenue. With AppDynamics, you get 100% visibility into your 
Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro!
http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk
_______________________________________________
Openca-Users mailing list
Openca-Users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to