[OpenXPKI-users] DNS check fails

[Siekmann, Marco]

Hi guys,

I am facing some issues with the DNS checks.
I entered CN and SAN's that are public domains but got an unknown DNS check 
e.g. www.google.de which results in an additional step in the workflow.
With nslookup everything can be reached properly on that system.

In addition, internally we are having non valid DNS names for some system, but 
need to add them in the SANs and these lookups are failing completely.
So I would like to have a closer look at the DNS policy check as well. Where 
can I find that?

Kind regards

Marco

Marco Siekmann
Security & DevOps Engineer
Bereich Compliance & Information Security
E-Mail:  
marco.siekm...@adesso-service.com
Web: www.adesso-service.com
adesso as a service GmbH
Frühlingstraße 8
76131 Karlsruhe

adesso as a service GmbH · Sitz der Gesellschaft: Dortmund · Amtsgericht 
Dortmund HRB 25321 · Geschäftsführer: Stefan Schmitt, Christopher Schmelter

___
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

[OpenXPKI-users] Default value's in profile templates

[Siekmann, Marco]

Hello,

I was adding a new certificate profile last week and had to add the new field 
template.
For that new use case, the value for the field would always be the same. So I'd 
like to have this pre-filled when reaching the workflow step but still 
editable, if it needs to be changed.
In the sample no "default" value is mentioned, but I'd like to have that 
available.
Is there an option available?

Kind regards

Marco

Marco Siekmann
Security & DevOps Engineer
Bereich Compliance & Information Security

Mobil: +49 171 9953568
E-Mail:  
marco.siekm...@adesso-service.com
Web: www.adesso-service.com

adesso as a service GmbH
Frühlingstraße 8
76131 Karlsruhe

adesso as a service GmbH · Sitz der Gesellschaft: Dortmund · Amtsgericht 
Dortmund HRB 25321 · Geschäftsführer: Stefan Schmitt, Christopher Schmelter

___
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

[OpenXPKI-users] CertNanny - Version

[Siekmann, Marco]

Hi,

I had a look at the CertNanny Project and want to setup certnanny.
I got a bit stuck and took a look at the release.
There are a few newer RC available.

Which is the most stable version from certnanny, which can be used on Linux and 
Windows?
sscep is working fine already. No issues with that anymore.

I am looking forward to get things more automated asap.

Kind regards

Marco

Marco Siekmann
Security & DevOps Engineer
Bereich Compliance & Information Security

E-Mail:  
marco.siekm...@adesso-service.com
Web: www.adesso-service.com

adesso as a service GmbH
Frühlingstraße 8
76131 Karlsruhe

adesso as a service GmbH · Sitz der Gesellschaft: Dortmund · Amtsgericht 
Dortmund HRB 25321 · Geschäftsführer: Stefan Schmitt, Christopher Schmelter

___
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users

[OpenXPKI-users] Active/Active Setup

[Siekmann, Marco]

Hello,

we are planning to setup up an active/active system over two geo locations.
Does anyone have experience with such a scenario and can share some best 
practices?
We would otherwise testing db replication or setting up different signing ca's 
within the datacenters, but I would rather have this in a way to be able to 
control duplicated certificates.

Cheers

Marco

___
OpenXPKI-users mailing list
OpenXPKI-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openxpki-users