Hi Gabs, sorry I dont get what your problem is.
You always have a self-signed certificate at the end of your chain and if you follow the quickstart guide you will end up with a "offline root ca" and an issuer certificate below which signs the request.
OpenXPKI can handle any depth of hierarchy levels, but you have to feed the full certificate chain into the system (only the certificates, not the keys!) to allow it to verify all levels up to the root.
Oliver Am 10.12.2016 um 12:51 schrieb Gabriel Sailer:
Hello, i want to setup openXPKI as issuing CA of a Windows CA. I can sign the neccessary issuing certificate by the root CA. But how do i configure openXPKI to act as an issuing CA? I think i have to replace the selfsigned root certificate and private key by the issuing certificate. How do i install the new root certificate at the openXPKI? The other three installed certificates (ra, signing, ..) must be also replaced, i think. I need openXPKI for installing 802.1X certificates to various client systems (Linux, MacOS, ..) via the SCEP protocoll. Microsoft NDES i no option because of installing restrictions (domain requirements). Many thanks for any information Gabs ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today.http://sdm.link/xeonphi _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
-- Protect your environment - close windows and adopt a penguin!
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today.http://sdm.link/xeonphi
_______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
