Hi,
> I did a first installation of OpenXPKI using a Hyper-V machine on which
> Debian 10 is installed. When following the instructions in the quickstart
> guide and using the sampleconfig.sh everything went fine and I got a running
> system.
>
> My second try was to set the KEY_PASSWORD in the sampleconfig.sh line 27 to
> an empty string to get the random passwords as described in the comment above
> (beginning from a snapshot before executing the sampleconfig.sh).
> When executing this sampleconfig.sh the script ended at line 350
> openxpkiadm certificate import --file "${SCEP_CERTIFICATE}" --realm
> "${REALM}" --token scep --key ${SCEP_KEY}
> without any further message (see complete output below).
p
Good to hear you got it working. lease note that the sampleconfig script is
only that - a quick way to get a working system up and running so you can have
a peek at the software.
It is not intended to give you a PKI you could actually use in production. If
you are wondering about the security of the CA passphrase of this setup you are
likely about to follow a non-optimal path, let's say.
As mentioned earlier on the list you need to design your PKI properly before
you get to the point where you actually configure the system according to the
design. And at that point you wouldn't use sampleconfig.sh.
Cheers
Martin
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
