Re: [OpenCA-Devel] Single database, no dataexchange issues

2008-12-22 Thread John A. Sullivan III
I'm under a tight deadline for work but I have virtually everything documented for internal purposes. I'd be happy to send this to someone to tidy up for a wiki entry. I even have the transfer scripts documented so it shouldn't be much work. I just don't have even a spare minute now to put it in

Re: [OpenCA-Devel] Single database, no dataexchange issues

2008-12-22 Thread Massimiliano Pala
AFAIK that is the only thing that needs to be done - we shall probably have a method for the pub interface to retrieve the latest CRL and the CA cert from the DB instead from the filesystem.. this could give more flexibility to setup the CA and RA with a shared remote DB. I think it would be usef

[OpenCA-Devel] Single database, no dataexchange issues

2008-12-17 Thread John A. Sullivan III
Hello, all. We've been experimenting with using a single shared, remote database rather than doing all the node dataexchanges in our test PKI. It is working well except we realized we had to manually copy the latest crl and cacert to the pub crytpo file system if we did not do the dataexchange. I