Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread dalini
Oliver Welter wrote: Hi, i may be able to test against a pix, but can't promise, since i'm not working there anymore, but i have still good contacts so it may be possible but i don't have access to any cisco-router equipment for testing those ios systems I think I can organize an old Cisco

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Oliver Welter
Hi, i may be able to test against a pix, but can't promise, since i'm not working there anymore, but i have still good contacts so it may be possible but i don't have access to any cisco-router equipment for testing those ios systems I think I can organize an old Cisco 2600 Series here and set

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Martin Bartosch
Hi, > btw: is it possible to see/get those sscep improvements already somewhere? yes, on CVS head, src/common/lib/cmds/scepPKIOperation > i think u may talking about the batch processor ;) > there we have/had some havy requirements of high amount issuing of certs > and speedproblems when it come

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread dalini
Martin Bartosch wrote: OK, so I'll improve the script to a point where the default configuration results in exactly the same behaviour as the previous version. btw: is it possible to see/get those sscep improvements already somewhere? Yeah, I meant you. In a former discussion you were concern

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Martin Bartosch
Hi, > I see no problems to include both scripts and activate the new one if it > behaves like the old one. OK, so I'll improve the script to a point where the default configuration results in exactly the same behaviour as the previous version. >> I guess practically, but I haven't performed benc

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Michael Bell
Martin Bartosch wrote: umm, yes, if it is configured to work so, it will work just like the old script. BTW: an older version of this script has been in test (preproduction) use in my environment for some months now, but we currently do not experience high load on the SCEP interface. I see no

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Martin Bartosch
Hi, > so if I see this correctly the new scep script adds new functionality > AND does everything it has done before - meens it is a drop in > replacement for the old script ? umm, yes, if it is configured to work so, it will work just like the old script. BTW: an older version of this script has

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Oliver Welter
Hi, so if I see this correctly the new scep script adds new functionality AND does everything it has done before - meens it is a drop in replacement for the old script ? Martin, you said it is "slower" - acedemic slower or practical slower :) If I assume right - my Opinion: make the new scep

Re: [OpenCA-Devel] Release management (was: Improved SCEP interface)

2005-08-02 Thread Martin Bartosch
Hi, > I started a small discussion with Oli about our branch management but it > is perhaps no good idea to make it more complicated. The idea was to > introduce feature and minor release branches on the 0.9.2 branch. The > problem is that this is perhaps to complicated for the most people. > > We

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Martin Bartosch
Hi, >> The "automatic approval" mode implements a method for request approval >> defined in later versions of the SCEP draft. Use this mode only if >> you have met the prerequisites: >> >> - CVS head versions of OpenCA::OpenSSL and OpenCA::PKCS7 (will be >> included in 0.9.2.3) > > Do you mean w

Re: [OpenCA-Devel] Improved SCEP interface

2005-08-02 Thread Michael Bell
Hi Martin, Martin Bartosch wrote: As SCEP is imho one of the most requested features in the near past, I think we should put it in head and perhaps even into branch, perhaps with a config switch to give the user the choice... I decided to check it in in order to allow others to have a look at