Hi Oliver, Martin,

my MySQL implementation allowed the following index creations:

CREATE INDEX wf_state_state on workflow (workflow_state);
CREATE INDEX cert_realm_index on certificate (pki_realm);
CREATE INDEX csr_profile_index on csr (profile(200));
CREATE INDEX csr_role_index on csr (role(200));
CREATE INDEX cert_csrid_index on certificate (req_key);
CREATE INDEX wf_realm_index on workflow (pki_realm);
CREATE INDEX csr_subject_index on csr (subject);
CREATE INDEX cert_role_index on certificate (role(200));
CREATE INDEX wf_hist_wfserial_index on workflow_history (workflow_id);
CREATE INDEX wf_context_key_index on workflow_context (workflow_context_key);
CREATE INDEX wf_type_index on workflow (workflow_type);
CREATE INDEX cert_subject_index on certificate (subject);
CREATE INDEX cert_identifier_index on certificate (identifier);
CREATE INDEX cert_status_index on certificate (status(200));
CREATE INDEX cert_attributes_key_index on certificate_attributes 
attribute_contentkey);

As you can see i respected your suggestions with 200 bytes field lengths
for the text fields "profile", "role" and "status".

Unfortunately we would also need the solution for workflow_context.
I don't have the experience how large it could grow, i just imagine
large key lengths of 8192 and corresponding blown up certificate lenghts.
This could be rather dynamic in the future, and the database indexes
should correspond to this.

CREATE INDEX wf_context_value_index on workflow_context workflow_context_value);
CREATE INDEX cert_attributes_value_index on certificate_attributes 
attribute_value);

Cert Attributes don't matter at my setups -- the complete table is empty.
For what is it used anyway within other implementations?

Greetings
    -Achim

------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
OpenXPKI-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-devel

Reply via email to