I believe the crypto files must be copied in place from the old system. Backup and restore I think only takes care of the database.
On your old system did you do a lot of batch operations? Batch creation of certificates do not store private key in database. Private key is located under the bp directories. (Again something you would have to copy over). Dave ----- Original Message ----- From: Mike Schmidt [mike.schm...@intello.com] Sent: 11/28/2013 10:38 AM EST To: "Users' Help and Suggestions" <openca-users@lists.sourceforge.net> Subject: [Openca-Users] Questions about openca structure Now that I have 1.5.1 running, I've been looking at the database and the different directories. 1. On my old system, running 0.9.3rc1, I had all the generated certificates in the crypto/certs in .pem format. After importing, none of them are there. They are in the database, though. Is this correct? 2. Out of approx 4000 certs (expired, revoked, and valid) in the database, 462 have "encrypted private key" in the data field of the certificate table, the others don't. This is the same with 0.9.3. Why is this? And where is the encrypted private key for the rest? The request table has the same information - no private key on most of the requests. Most of the certs are created via scep. 3. How can we use user certs to authorize the web interface usage? I noted in the comments that the serial number of the certt becoes the user id, but where do we set the user id that are allowed? The comments seem to indicate that this is done in the acls, but there is no example of how to do this. -- Mike SCHMIDT CTO Intello Technologies Inc. mike.schm...@intello.com Canada: 1-888-404-6261 x320 USA: 1-888-404-6268 x320 Mobile: 514-409-6898 www.intello.com ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk _______________________________________________ Openca-Users mailing list Openca-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-users ------------------------------------------------------------------------------ Rapidly troubleshoot problems before they affect your business. Most IT organizations don't have a clear picture of how application performance affects their revenue. With AppDynamics, you get 100% visibility into your Java,.NET, & PHP application. Start your 15-day FREE TRIAL of AppDynamics Pro! http://pubads.g.doubleclick.net/gampad/clk?id=84349351&iu=/4140/ostg.clktrk _______________________________________________ Openca-Users mailing list Openca-Users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openca-users
