Hi all,
sorry, I was too enthusiastic about this, yesterday. Have a look at the
release notes: https://www.mozilla.org/en-US/firefox/34.0.5/releasenotes/
It sais: "Proprietary window.crypto properties/functions re-enabled (to
be removed in Firefox 35)" - i.e. Mozilla is just giving us some more
t
Hi Nuno,
maybe I have good news about this issue:
When Firefox 33 came out, I wasn't even able to sign the challenge in
the web interfaces (which I have configured for login via certificate).
In the meantime I was using Firefox 31 ESR and now that I have found
some time and started to look into t
Hi Nuno,
I'm cc'ing the developers list as well.
Mozilla has removed some crypto functions which OpenCA uses in Firefox 33:
https://wiki.mozilla.org/SecurityEngineering/Removing_Proprietary_window.crypto_Functions
As a replacement they propose the webcrypto API:
http://html5.creation.net/webcry
Hi,
openca usually writes very detailed log files in xml format in
subdirectories below var/log/xml in the openca installation directory.
Maybe there are some hints in these logs. Maybe some hints I have
written down for an installation of openca-1.1.1 compiled from source
may be helpful, too - s
Hi,
I did a clean install ( system and openCA - using
openca-base-1.5.1-linux-x64-CentOS-6.4.x86_64.run) I'am facing a problem
with inserting ca certificate into database. After creating CA certificate,
in the ca-certificate table there are only nulls:
mysql> select * from ca_certificate;
+---
Hi all!
I found the following bug in the OpenCA's startAutoCA modul.
When I use a default settings then an "Operator's role(s)"'s value is
"RA Operator" and it check wrongly by the auto signature.
In this case the CA machine accept every sign request (not only the RA
Operator requests) and sign
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
I had problems with UTF8 strings in advanced_csr displaying wrong
characters in the browser (?) on non "standard" characters, that
resulted in bloated CSRs.
This happened only in the DN entry (O and C attributes), these wrong
strings resulted fro
Hello Max,
and sorry for the late reply. I translated it by myself, so only my
name is needed. If it's possible, maybe I can help with the
translation of changes from the next release before the release date.
Wish you a good day, Andrei
On Sun, May 23, 2010 at 10:11 PM, Massimiliano Pala
wrote:
Hello Andrei,
Michael is not working on the project anymore.. that's why you haven't
received any reply. Thanks for the translation.. I'll check it, and
if everything is all right, I will add it for the next release.
One thing, who shall we put in the THANKS for it besides you ?
Cheers,
Max
O
Hi all,
I tried to go deeper into issues related to PostgreSQL, and I fixed a couple
of bugs in the DBI module. Sorry for the inconvenience.
I posted the complete solution on our wiki pages:
http://mm.cs.dartmouth.edu/wiki/index.php/OpenCA_PKI_v1.1.0
please let me know if there are still pr
Hi Guys,
I am trying to finish the testing of the new version and adding documentation
for installing OpenCA on the WiKi.
http://www.openca.org/wiki/
If you have time to check it and let me know what you think about it, that
would be great. There's not much documentation there, yet. So,
Good :D
Have you figured out what the problem was ? If it was a bug in the DBI.pm
let me know - I fixed many in the new release (and I changed it a lot as
well to make it more efficient...).
Cheers,
Max
On 02/05/2010 03:31 PM, Kent Peacock wrote:
Never mind. Got it to work.
Kent
On 02/05/1
Never mind. Got it to work.
Kent
On 02/05/10 11:21, Kent Peacock wrote:
> I've been working on getting OpenCA 1.0.2 up and running on a Solaris 10
> machine. I've got it almost there, but I'm running into a bug where the
> root certificate is not being added into my MySQL database. It seems to
I've been working on getting OpenCA 1.0.2 up and running on a Solaris 10
machine. I've got it almost there, but I'm running into a bug where the
root certificate is not being added into my MySQL database. It seems to
me that the basic problem is that the software attempts to create an
empty rec
Hi Ralf, all,
I will remove the handleExpiredCert completely as you suggest.. :D
Ciao,
Max
On 11/29/2009 11:07 AM, Ralf Hornik Mailings wrote:
Hi
Samuel Rios Carvalho schrieb:
select status,dn,date(notafter),time(notafter) from certificate
where status = 'EXPIRED';
So cmdli
Hi
Samuel Rios Carvalho schrieb:
>
> select status,dn,date(notafter),time(notafter) from certificate
> where status = 'EXPIRED';
>
> So cmdlistCerts doesn't seem to do the correct query.
> I will try to fix that on this weekend.
>
You can download the fixed version of OpenCA::DBI.p
Hi David,
here's the best way to reach the CVS repository:
rsync rsync://cvs.openca.org/cvs/libpki/
The snaps of the libpki are available at:
http://ftp.openca.org/libpki/
We are not currently using the CVS on SF... maybe we should, at some
point... :D
Later,
Max
On 10/5/09
Hi Max,
Could you tell me is there an world-readable revision control system
(e.g. CVS, SVN, git, ...) for OpenCA and LibPKI? The CVS on SourceForge
seems to be out of date...
Kind regards,
David
--
Dr David O'Callaghan
Research Fellow - Grid-Ireland - e-INIS - Computer Architecture & Gri
Hello,
thanks for the email. I know the project is quite huge and it is
still growing/changing.. :D And we always need some people who'd
like to volunteer.
The big thing, right now, is the development of the LibPKI which
will be the basic building block for all the other OpenCA's projects.
Indee
On Wed, 2009-05-06 at 20:29 -0400, Massimiliano Pala wrote:
> Dear OpenCA community,
>
> we are trying to understand how to improve the current way that browsers
> User Interface interact with the users when it comes to PKIs. In particular
> we are interested in:
>
> How to improve the brow
Dear OpenCA community,
we are trying to understand how to improve the current way that browsers
User Interface interact with the users when it comes to PKIs. In particular
we are interested in:
How to improve the browsers user interface
to do so, we need to understand what the users (YOU
Hi, Max, and thanks for getting back to me. I believe this issue is
unrelated. The proper start and kill links were in place but the kill
links were not working. I believe this is because the start function
did not make an entry in /var/lock/subsys as described below. I do not
know when RedHat
Hi John,
did you use the chkconfig util ? This is usually used to add/remove
the required links to the run level scripts. Usually, after installing
the openca software you want to use your specific init-scripts-util
to integrate it in your init/shutdown sequence.
For redhat you can use:
Hello, all. The openca init script is not working properly on RedHat
style distributions. It does not run on shutdown. Apparently RedHat
style systems will not run the shutdown script if there is not a file
in /var/lock/subsys/.
Here is our internal documentation about how we fixed it:
cd /do
Hi,
sorry.. there has been a problem with the upload interface to SourceForge,
anyhow, it is fixed now..
Thanks :D
Jose Vasconcellos wrote:
There's a bad link or a file missing:
http://www.openca.org/alby/download?target=openca-tools-1.1.0.tar.gz
--
Best Regards,
Massimiliano Pal
Alexander Klink wrote:
||| Security Advisory AKLINK-SA-2008-001 |||
||| CVE-2008-0556 (CVE candidate)|||
[...]
I hope you've read the warning and did not apply the patch to any
production system ye
||| Security Advisory AKLINK-SA-2008-001 |||
||| CVE-2008-0556 (CVE candidate)|||
OpenCA - Cross Site Request Forgery (XSRF)
==
Date released: 13.02.2008
Date
Massimiliano Pala wrote:
Robert Nelson wrote:
What is the current status of the OpenCA project?
Mmmm.. the status of the project is 'work-in-progress'. Currently I have
been working on several sub-projects to enable the OpenCA-NG project to
start. At the moment we lack quite a bit of contribut
Robert Nelson wrote:
What is the current status of the OpenCA project?
Mmmm.. the status of the project is 'work-in-progress'. Currently I have
been working on several sub-projects to enable the OpenCA-NG project to
start. At the moment we lack quite a bit of contributions from the developers,
What is the current status of the OpenCA project?
The website news on 2007/04/13 says that version v0.9.3-rc2 will be
released shortly and that was almost 8 months ago.
Also where is the current source repository? The one on SourceForge
seems to be out of date. The openca-0.9 directory looks
Olá!
Então, aceito ajudar sim ... Já tenho alguma experiência em traduções ...
Mas diga, como é a base da internacionalização? .POT?
Abraço!
Igor
2007/7/22, [EMAIL PROTECTED] <
[EMAIL PROTECTED]>:
Send OpenCA-Devel mailing list submissions to
openca-devel@lists.sourceforge.net
To s
Thanks Dr. max, the info was helpful!
-Janet
On 5/22/07, Massimiliano Pala <[EMAIL PROTECTED]> wrote:
Hi Janet,
I am not sure I understood your question, anyhow adding a new function
depends on at which level you want it. The general flow is like this:
[ main cgi ] -> [ command ] -> [
ge: 1
Date: Sun, 27 May 2007 15:44:56 +0330
From: MRKH <[EMAIL PROTECTED]>
Subject: [OpenCA-Devel] OpenCA
To: openca-devel@lists.sourceforge.net
Message-ID:
<[EMAIL PROTECTED]>
Content-Type: text/plain; charset="iso-8859-1"
Hi,
I want to do some changes in OpenCA
1
want.
Best regards,
Bahaa Alamood
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of MRKH
Sent: Sunday, May 27, 2007 8:15 AM
To: openca-devel@lists.sourceforge.net
Subject: [OpenCA-Devel] OpenCA
Hi,
I want to do some changes in
Hi,
I want to do some changes in OpenCA
1) I want to change its language to Arabic , what do I must to do?
2) I want to customized its interfaces as I want , What do I must to do?
Thanks for every one who can help me
-
This
s] openca-sv documentation (Massimiliano Pala)
--
Message: 1
Date: Tue, 22 May 2007 11:19:51 +0330
From: MRKH <[EMAIL PROTECTED]>
Subject: [OpenCA-Devel] Openca problem
To: openca-devel@lists.sourceforge.net
Message-ID:
&l
Hi,
because the openca-sv is used outside our project I packaged it as an
external tool. Of course the sources are available, the package name
is:
openca-tools.tar.gz
You can download it from here:
https://www.openca.org/projects/openca/downloads.shtml
Cheers,
Dr. Max
Arsen
Hi Janet,
I am not sure I understood your question, anyhow adding a new function
depends on at which level you want it. The general flow is like this:
[ main cgi ] -> [ command ] -> [ lib Function ] -> [ Modules ]
In particular: the main cgi dynamically loads the invoked command, which
use
Hi,
can you provide some more details ? From your small description it seems
just a matter of URL configuration. Please check that the configured
DocumentRoot in Apache configuration matches the html directory (usually
/var/www/html in FC6). Do this also for the cgi-bin directory.
Cheers,
Dr. Ma
Hi,
I am new on linux and openCA , I use fedora core 6 and openca-0.9.3-rc1
I have configure and make all packagaes who we need and my openca was
started too,
Then I had some problem when I config the packages,
I was started HTTPD too
but I cannot see web interfaces when I browse that specified
Hi all,
I guess some of you had problems in configuring access to node management,
etc... indeed it can be tricky on some systems (e.g. in Fedora) as the
SSLOptions in the default configuration (/etc/http/conf.d/ssl.conf) are
wrongly set only for some directories/files. You can try setting it cor
Forgot to attach file :)
--
Alexei Chetroi
Smile... Tomorrow will be worse. (c) Murphy's Law
openca-tools_1.0.0-1.diff.gz
Description: Binary data
-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.ne
On Fri, Jan 19, 2007 at 02:54:17PM +0100, Marco Nenciarini wrote:
> Date: Fri, 19 Jan 2007 14:54:17 +0100
> From: Marco Nenciarini <[EMAIL PROTECTED]>
> To: Code and Bugs topics only
> Reply-To: Code and Bugs topics only
> Subject: Re: [OpenCA-Devel] openca-0.9.3rc1
On Fri, Jan 19, 2007 at 12:40:51PM +0200, Alexei Chetroi wrote:
> Hi,
>
> I was trying to repackage upcoming openca-0.9.3-rc1 for debian
Hi, i'm repackaging it too. Can we work together? My objective is to
get an usable openca suit to upload on debian lenny.
I've tried to contact the peoples
Hi,
I was trying to repackage upcoming openca-0.9.3-rc1 for debian, but
didn't succeed, because modules-ext are built, even if are disabled by
--disable-external-modules configure option. I know, that source tree is
being reorganized, so my problem could be caused by two things:
transition bug
Hi,
asking which Version is actual, because found an OpenCA-SV-1.0.1 anywhere
on a mirror.
Is this actual ?
Or should I better use 0.9.8 from sourceforge ?
Many thanks for info.
Christian
-
Diese E-Mail wurde durch SquirrelMail versandt
"Webmail for n
Ives Steglich wrote:
> Hi Max,
Hello!
[...]
> I think you would/could help people a lot, if you can be a bit more verbose
> on
> all those changes and the ng stuff (which is very vague, at least for me).
> A more detailed ng page may people help to understand the new approaches,
> parts and ho
Diego de Felice wrote:
> I've tested OpenCA (an old version to be honest) by issuing more than
[...]
> nextgen OpenCA less dependent from the command line openssl ?
The best solution would be to get rid of the index.txt file and build it
when needed (e.g. for revokation purposes). I guess this is
Michael Bell wrote:
> Hi Max,
[...]
> This would work for me. I have several admins which only need scep and
[...]
> install them both.
>
> So I would prefer your first proposal.
Great. So if no one else will have issues, we'll be having the OpenCA-Tools
package for the next release :-D
---
Hi Max,
Massimiliano Pala schrieb:
Michael Bell wrote:
So nice to hear from you... I hope everything is fine with you... :-D
Only the usual stress ;)
The idea is interesting and I guess it is something easy to do. The only
concern I have is the possibility of confusing the users when requ
Michael Bell wrote:
> Hi Max,
Hello Michael
So nice to hear from you... I hope everything is fine with you... :-D
Now the important stuff...
> I already mentioned this in an earlier mail but I would like to separate
> openca-scep and openca-sv too or more exact I want to distribute all
> C
Hi Max,
Massimiliano Pala schrieb:
I am repackaging OpenCA in order to have the installation easier
for new users and also to fix some of current installation errors.
I am also restructuring the current CVS to have it easier to browse
and to maintain (no more all those unused dirs around). Foll
Massimiliano Pala wrote:
> Hi all,
[...]
> * OpenCA-base-X.X.X.tar.gz (.rpm) -- OpenCA base installation
>(almost like the current one, but without the OCSP server)
>
> * OpenCA-base-Docs-X.X.X.tar.gz (.rpm) -- Documentation about
>OpenCA (with sources)
Maybe we can move to a different pa
Hi all,
I am repackaging OpenCA in order to have the installation easier
for new users and also to fix some of current installation errors.
I am also restructuring the current CVS to have it easier to browse
and to maintain (no more all those unused dirs around). Following
there is the structure o
Hello,
I'm trying to setup an OpenCA on a SELinux system (Hardened Gentoo) but I'm
currently copping with a problem.
- When SELinux is disabled (selinux=0 at boot time) OpenCA always starts and
works correctly.
- When the system is in permissive mode (i.e. no action is denied), I cannot
start
dear martin
thanks for your answer
antonio araujo
--- Martin Bartosch <[EMAIL PROTECTED]> escribió:
> Hi,
>
> > martin i still have a little doubt about how the
> > openssl command is wrapped with with-nfast -M,
> could
> > you give me some hints please? maybe the openssl
> > command is wrappe
dear massimiliano,
thanks for your answer :o)
i studied ca.c file from apps directory of openssl to
find out how to use keys stored on hsm.
antonio araujo
--- Massimiliano Pala <[EMAIL PROTECTED]>
escribió:
> Antonio A wrote:
> [...]
> > could help me to load openssl ENGINE CHIL
> (ncipher)
Antonio A wrote:
[...]
could help me to load openssl ENGINE CHIL (ncipher)
from an application in C++. i was studying openca to
[...]
i apreciate all help you can give me :)
You can take a look at the openssl's apps or at the openca-ocspd.
Sometimes there are specific keywords to be used for
Hi,
martin i still have a little doubt about how the
openssl command is wrapped with with-nfast -M, could
you give me some hints please? maybe the openssl
command is wrapped with:
/opt/nfast/bin/with-nfast openssl ca
am i wrong?
yes, correct. Add the -M flag to make sure that you are not
dear martin,
thank you for your answer :)
i found a document that explains what you say about
with-nfast command line utility and its credentials
file, if someone wants to read it:
www.juniper.net/techpubs/hardware/dx/fips_supplement.pdf
martin i still have a little doubt about how the
openssl co
Hi,
in order to signing certificates it is necessary to
open the hsm with its operator card set
(/opt/nfast/bin/with-nfast pause) before executing the
openssl ca command.
i would like to know how does openca get the hsm
password to load the private key to sign the
certificate? (for example how
dear friends of openca,
i have tested openca with an nCipher nShield hsm and
everything works.
reading the openca sources i saw that it uses an
openssl command to, for example, signing certificate
through engine CHIL (something like openssl ca xxx xxx
-passin -keyfile )
in order to signing c
Hi
anyone of you ever worked on an installer script for OpenCA ?
So I mean some handy cli or curses tool that wlaks through the
config-xml and eases the initial setup ?
Oliver
--
Diese Nachricht wurde digital unterschrieben
oliwel's public key: http://www.oliwel.de/oliwel.crt
Basiszertifikat:
Hi Chris,
now I'm back from holidays :)
Anyway, I am getting back to looking at the CVS head and in particular
the shell client interface. My question today is... I have found the
"openca-shell-client" and shall examine it more, but it seems to be a
menu driven console client. I see in CHANGE
Hello Guys, sorry I have not been around for a while, but I was on
holiday and am having some ongoing personal problems.
Anyway, I am getting back to looking at the CVS head and in particular
the shell client interface. My question today is... I have found the
"openca-shell-client" and shall e
Dear OpenCA Users,
the OpenCA Team wants to announce the this years Users-Workshop.
If the majority of users has problems with the date - please let us know
and we will try to move it !
Location: Techn. Universitaet Muenchen (Germany)
Mon 17. October: Developer Meeting (open to whoever is in
Hello Juan David,
I'm working with knoppix and red hat. I had the same problem. I saw an older mail with our problem. She had solved it restarting the computer and it works. You can search this mail into this list for more information.
I remember the error reason is that another application is u
Hello,
You can use debian branch from cvs to build debian packages for OpenCA,
they are still betas/experimental/etc/etc, however they're confirmed to
work in a few environments, with Debian 3.1 or later (sid/experimental
etc.). Let me know, if You need further instructions on building debian
pa
Hi Chrysa,
I commited your fixes for el_GR and the commands. Sorry for the delay. I
start commiting all the hanging stuff now.
Thanks Michael
--
___
Michael BellHumboldt-Universitaet zu Berlin
Tel.: +49 (0)30-209
Common Information
OpenCA Version :openca-0.9.2.2
Perl Version: 5.8.4-8
OpenSSL Version : 0.9.7e-3
Operating System: Debian 3.1
Used Browsers : firefox 1.0
Used Language(s): Special Changes :
Apache/1.3.33 (Debian GNU/Linux)
-
Hi Bahaa,
Can anyone point me to how to write enable OpenCA as a web service and
how to work with access controls of OpenCA. I would like to be able to
submit a pcks10 request and receive the signed certificate via web
service. Thanks in Advance
There are two (three) ways for this :)
1) You can pa
Hello All,
Can anyone point me to how to write enable OpenCA as a web
service and how to work with access controls of OpenCA. I would like to be
able to submit a pcks10 request and receive the signed certificate via web
service. Thanks in Advance
Best regards,
Bahaa Al-amood
Chrysa Papagianni wrote:
Hello,
here is an updated version of the greek localization file openca.po
http://noc.ntua.gr/~chrisap/openca.tar.gz
and some strings in the cmds that were probably missed and not translated
http://noc.ntua.gr/~chrisap/cmds.diff
Which version did you use for the translati
Hello,
here is an updated version of the greek localization file openca.po
http://noc.ntua.gr/~chrisap/openca.tar.gz
and some strings in the cmds that were probably missed and not
translated
http://noc.ntua.gr/~chrisap/cmds.diff
Best
Regards--Chrysa PapagianniElectrical and Computer
engi
Michael,
Michael Bell wrote:
Tagged (openca_0_9_2_2). Please verify.
just to let you know that I have checked out the fresh 0_9_2_2 tag and
installed it in my test environment. It seems to work fine against the
LunaSA I have available so that is good news. I tested right from the
start, i.e. roo
Tiller, Robert wrote:
can someone throw a tarball of 9.2.2 on the openca website for download?
I'm a little bit slow this time. The file is present at sourceforge now
and some seconds ago I updated the web pages in the cvs.
www1.openca.info should be up-to-date in one hour. www.openca.info
shoul
Title: RE: [OpenCA-Devel] openca-0.9.2.2
can someone throw a tarball of 9.2.2 on the openca website for download?
Robert
-Original Message-
From: [EMAIL PROTECTED] on behalf of Michael Bell
Sent: Mon 3/7/2005 10:55 AM
To: openca-devel@lists.sourceforge.net
Cc
Chris Covell wrote:
Guys, when is openca-0.9.2.2 being tagged on CVS ?
Tagged (openca_0_9_2_2). Please verify.
Michael
--
___
Michael BellHumboldt-Universitaet zu Berlin
Tel.: +49 (0)30-2093 2482 ZE Computer- und
I say tag away !
Michael Bell wrote:
Chris Covell wrote:
Guys, when is openca-0.9.2.2 being tagged on CVS ?
Cool question, if there are no problems at all then I can tag it on
monday. So deadline for changes or showstopper notices is monday 9.00 UTC.
Michael
Chris Covell wrote:
Guys, when is openca-0.9.2.2 being tagged on CVS ?
Cool question, if there are no problems at all then I can tag it on
monday. So deadline for changes or showstopper notices is monday 9.00 UTC.
Michael
--
___
Michael
Guys, when is openca-0.9.2.2 being tagged on CVS ?
Chris...
---
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start readi
ceforge.net
> Subject: Re: [OpenCA-Devel] openca-configure produces no output
>
> Alexei Chetroi wrote:
>
> > Finally, I've fixed this error. Shame on me :), when editing
> >config.xml I've broke it's structure and didn't observed it. After
> >cor
Alexei Chetroi wrote:
Finally, I've fixed this error. Shame on me :), when editing
config.xml I've broke it's structure and didn't observed it. After
correcting, everything is fine.
we should add a simple tool, which checks for a valid xml-document and
tells this explicitly, maybe we should ad
On Mon, Feb 21, 2005 at 06:34:02PM +0200, Alexei Chetroi wrote:
> Date: Mon, 21 Feb 2005 18:34:02 +0200
> From: Alexei Chetroi <[EMAIL PROTECTED]>
> To: openca-devel@lists.sourceforge.net
> Reply-To: openca-devel@lists.sourceforge.net
> Subject: [OpenCA-Devel] openca-configu
On Mon, Feb 21, 2005 at 09:52:05PM +0100, Piotr Wadas wrote:
> Date: Mon, 21 Feb 2005 21:52:05 +0100 (CET)
> From: Piotr Wadas <[EMAIL PROTECTED]>
> To: openca-devel@lists.sourceforge.net
> Subject: Re: [OpenCA-Devel] openca-configure produces no output
>
> Hello,
> &
Hello,
Which automake package you have installed? I have automake1.7 and
don't remember any errors.
I'd been using automake 1.4 when I was writing previous message, now
I linked /etc/alternatives/automake to 1.9, and I have the same:
[...]
cd src/scep; aclocal -I . -I build
aclocal: configure.in:
On Mon, Feb 21, 2005 at 06:09:27PM +0100, Piotr Wadas wrote:
> Date: Mon, 21 Feb 2005 18:09:27 +0100 (CET)
> From: Piotr Wadas <[EMAIL PROTECTED]>
> To: openca-devel@lists.sourceforge.net
> Subject: Re: [OpenCA-Devel] openca-configure produces no output
>
[ snip ]
> I&#x
On Mon, Feb 21, 2005 at 05:50:16PM +0100, Oliver Welter wrote:
> Date: Mon, 21 Feb 2005 17:50:16 +0100
> From: Oliver Welter <[EMAIL PROTECTED]>
> To: openca-devel@lists.sourceforge.net
> Subject: Re: [OpenCA-Devel] openca-configure produces no output
>
> Hi Alexei,
>
Hi,
I'm facing strange problem and don't know how to handle it. I've
updated /etc/openca/config.xml and after configure_etc.sh is run files
are not updated from templates. openca-configure doesn't throw any error
out. here's example:
ca:/etc/openca/servers# ls ca.*
ca.conf.template
ca:/etc/openca
Hi Alexei,
open the configure_etc skript and look if you have the correct driectory
with your files in the "DIReCTORY" list at the top of the script.
You can try to add "/bin/sh -x" at the top - this will write the
execeute commands on STDOUT
Oliver
--
Diese Nachricht wurde digital unterschrieb
Hi,
I'm facing strange problem and don't know how to handle it. I've
updated /etc/openca/config.xml and after configure_etc.sh is run files
are not updated from templates. openca-configure doesn't throw any error
out. here's example:
ca:/etc/openca/servers# ls ca.*
ca.conf.template
ca:/etc/op
Hello Michael,
--- Michael Bell <[EMAIL PROTECTED]>
escribió:
> Ives Steglich wrote:
>
> >>> That's correct. The data must have the exact
> same
> >>> order.
>
> Uups, I was on the wrong way. If you send some data
> plus a signature to
> OpenCA's approve command then we store the data in
> yo
Ives Steglich wrote:
That's correct. The data must have the exact same
order.
Uups, I was on the wrong way. If you send some data plus a signature to
OpenCA's approve command then we store the data in your order in the
database. We never reorder the stuff to avoid problems with the
ordering. If
Thanks dalini,
>
> if the order is equivalent then it may be
> either an encoding or an cr/lf problem
> it must binary equivalent
>
> otherwise the signature can't be verified
> since it won't match, different representations
>
> could be a problem there?
Yes, I suppose that must be the proble
Johnny Gonzalez wrote:
Hello Michael,
That's correct. The data must have the exact same
order.
How does OpenCA loads data from the DB to check the
signature with openca-sv?
When I read the data to be signed from the DB, it
appears in this order:
-BEGIN HEADER-
TYPE = PKCS#10
SERIAL = 4896
Hello Michael,
>
> That's correct. The data must have the exact same
> order.
How does OpenCA loads data from the DB to check the
signature with openca-sv?
When I read the data to be signed from the DB, it
appears in this order:
-BEGIN HEADER-
TYPE = PKCS#10
SERIAL = 4896
NOTBEFORE =
Johnny Gonzalez wrote:
- When I use the interface the Method signText shows a
window with the data it is going to sign, that data
looks in a different order from the data I'm obtaining
in Java from the DB. So I guess that's the problem why
the signature is invalid.
That's correct. The data must hav
Hello Dalini, this is the situation.
In my company we will have a project, in a few days,
in which we will have to process 250.000 requests in
about a month or something. We are going to receive
about 10.000 CSR per day, so our RA has to process
(approve and sign) all 10.000 CSRs (or the number
re
Johnny Gonzalez wrote:
Hello I find a command called openca-sv Could I use it
to sign my requests? If that's true, can anybody tell
me how to sign (files or something) using it?
just to get things sorted out - what exactly do you wanna sign, at which
step in the process and where and how do you pu
Hello I find a command called openca-sv Could I use it
to sign my requests? If that's true, can anybody tell
me how to sign (files or something) using it?
Thanks,
Johnny
__
Renovamos el Correo Yahoo!: ¡250 MB GRATIS!
Nuevos servicios
1 - 100 of 363 matches
Mail list logo
