Hi, > How do I configure OpenXPKI for Production? previously, I configure it to use > samplescript.sh, if i want a custom configuration for production. how can i > do it?
This question is remarkably difficult to answer due to its depth, I'll give it a try anyway. The "sampleconfig.sh" doesn't really *configure* OpenXPKI properly, but instead it automates the steps needed to deploy a "minimum viable installation" for demonstration purposes. These are things like creating and importing the root and intermediate certificates, as well as the SCEP and Apache certificates, and copying realm information and the script adds OpenXPKI into the Apache configuration. So the sample configuration gives you an insight on a "minimum viable product", and this is far from being usable for anything considered ready for production use. The Quickstart guide https://openxpki.readthedocs.io/en/latest/quickstart.html also gives you the necessary steps to set up the system and get it running manually. Regardless of the CA Software you use you will have to design your PKI properly. The OpenXPKI documentation assumes that you have developed a PKI design and that you are implementing it using OpenXPKI. Best regards, Martin _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
