Re: WG: [Openca-Users] After 100000 certificate issued...

2006-09-19 Thread Peter Sylvester 

[EMAIL PROTECTED] wrote:

I found this in the OpenCA-Users mailinglist.

Any ideas or suggestions?

  
use the 'openssl ca' command with an empty index.txt file for each new 
certificate.
and then manages the files differently, i.e. copy the content into a 
database.
Or don't use the ca at all and use x509 and for revocation, just create 
an index.txt

with the revoked certs.


--
To verify the signature, see http://edelpki.edelweb.fr/ 
Cela vous permet de charger le certificat de l'autorité; 
die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. 



smime.p7s
Description: S/MIME Cryptographic Signature

WG: [Openca-Users] After 100000 certificate issued...

2006-09-19 Thread thomas.beckmann 
I found this in the OpenCA-Users mailinglist.

Any ideas or suggestions?

Regards

Thomas

> -Ursprüngliche Nachricht-
> Von: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] Im 
> Auftrag von Diego de Felice
> Gesendet: Montag, 18. September 2006 23:32
> An: Ideas, tips and discussions about OpenCA installation and 
> management.
> Betreff: [Openca-Users] After 10 certificate issued...
> 
>  I've tested OpenCA (an old version to be honest) by issuing 
> more than 10 certificates. The response times of course 
> are a bit degraded.
> I can say that the global functionality of OpenCA are not so 
> much influenced (only some pages regardings searches, but I 
> think they can be simply fixed). The most terrible issue 
> however is OpenSSL and its index.txt! With 10 and more 
> certificates the index.txt file is about 19 megabytes and for 
> every certificate you must wait a lot of seconds and this is 
> more and more notable when this number grows. I know this is 
> not to OpenCA related, but someone knows if there is a 
> project to enhance "index.txt" in a more performing solution 
> ? Is the nextgen OpenCA less dependent from the command line openssl ?
> 
>  Thanks in advance.
> 
> --
> Diego de Felice
> 
> --
> ---
> Take Surveys. Earn Cash. Influence the Future of IT Join 
> SourceForge.net's Techsay panel and you'll get the chance to 
> share your opinions on IT & business topics through brief 
> surveys -- and earn cash 
> http://www.techsay.com/default.php?page=join.php&p=sourceforge
&CID=DEVDEV
> ___
> Openca-Users mailing list
> Openca-Users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/openca-users
> 
> 
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]