OpenCA

Hi

I have enclosed a reworked install doc for OpenCA-0.8

Please send me comments, corrections.

Section 5 and 6 are not done since they cover areas that I have not
completed yet.  The LDAP is part of the default intallation and I will be
working on that next.

I'll need to do a separate install of with the DBI stuff unless there are
install docs out there for that already?


Tim

Hi

The public-cgi.conf.in and raserver.conf.in files don't have the new
filenames in VerifyPath and SignPath yet.

Cheers
Tim

Michael Bell wrote:
> =

> Hi,

Hi,

> I have some problems with the standard tar of solaris because it doesn=B4=
t
> support the -z option. /usr/bin/cd works doesn=B4t work too.

I know... I supposed it would be safer updating the tar to the GNU's tar,=

anyway... we could test the tar found for the -z supporting.

For the 'cd' command I will change the configure.in script instead.

> P.S. Massimiliano, did you check in the changes of 20010625 in the CVS?=


I am sorry but I am ill -- is it possible to get flu in June ??? -- and
I am late reporting some work so I'll check it when I'll get enough time
for doing it.

-- =


C'you,

	Massimiliano Pala

--o----------------------------------------------------------------------=
---
Massimiliano Pala [OpenCA Project Manager]                madwolf@....=
org
                                                     madwolf@....=
net
http://www.openca.org                            Tel.:   +39 (0)59  270  =
094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 =
365

Tim Bouwer wrote:
> 
> Hi
> 
> The public-cgi.conf.in and raserver.conf.in files don't have the new
> filenames in VerifyPath and SignPath yet.

Fixing...

-- 

C'you,

	Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                madwolf@...
                                                     madwolf@...
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365

Tim Bouwer wrote:
> 
> Hi

Hi,

> I have enclosed a reworked install doc for OpenCA-0.8
> Please send me comments, corrections.

When I'll get some time to read it... :-D Just a first note, please have
the text in a 78 chars per line format (max). This to help reading from
standard console ( 80x25 ).

> I'll need to do a separate install of with the DBI stuff unless there are
> install docs out there for that already?

This is Michael stuff... so Michael do you have some docs to send to Tim ??

-- 

C'you,

	Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                madwolf@...
                                                     madwolf@...
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365

Hi

> When I'll get some time to read it... :-D Just a first note, please have
> the text in a 78 chars per line format (max). This to help reading from
> standard console ( 80x25 ).

Ok done....  I'll wait for other changes before sending in an update.
Once we are agreed on a first version I can just send in diffs after that?

> > I'll need to do a separate install of with the DBI stuff unless
> there are
> > install docs out there for that already?
>
> This is Michael stuff... so Michael do you have some docs to send
> to Tim ??


I don't mind doing an install and then writing up the procedures.  Might be
better
for a first time installer to compose them?   I still need to iron out a
couple of
problems in the standard installation that I have (get the ldap working once
the
issuing of certificates is without errors for eg.)

Regards
Tim

Massimiliano Pala wrote:
> 
> Tim Bouwer wrote:
> >
> > Hi
> 
> Hi,
> 
> > I have enclosed a reworked install doc for OpenCA-0.8
> > Please send me comments, corrections.
> 
> When I'll get some time to read it... :-D Just a first note, please have
> the text in a 78 chars per line format (max). This to help reading from
> standard console ( 80x25 ).
> 
> > I'll need to do a separate install of with the DBI stuff unless there are
> > install docs out there for that already?
> 
> This is Michael stuff... so Michael do you have some docs to send to Tim ??
Hi,

I will prepare some docs over the weekend. It's not much ;-D

Regards Michael

Michael Bell wrote:

> Hi,
> 
> I will prepare some docs over the weekend. It's not much ;-D

Good. I had some time ... well no, but I was working on a computer... and
I got time to submit changes to the openca-0.8 tree. Now it should be
updated and the "make dist" should work from within the directory, simply
"./configure" then "make clean" and finally "make dist".

Let me know if it works.

-- 

C'you,

	Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                madwolf@...
                                                     madwolf@...
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365

Michael Bell schrieb:
> 
> Hi,
> 
> I will prepare some docs over the weekend. It's not much ;-D

I will need some more time because I installed a new system on friday
and don't backup the DBD::DB2-driver from IBM. Unfortunately IBM
reorganizes it's websites and so the driver was not available over the
weekend. I hope to finish the tests until tomorrow.

In the DBI-section of openca-0.8 are two problems:
1. OpenCA::DBIS is not in the tar-balls (it is required by OpenCA::DBI)
2. I have to remove some new code from DBI (ugly and fault-prone) :-(

Sorry for the bad news,

Michael
----------------------------------------------------------------------------
Michael Bell                             Email: michael.bell@...
Rechenzentrum - Datacenter        Email (work):
michael.bell@...
Humboldt-University of Berlin       Tel.(work): +49 (0)30-2093 2482
Unter den Linden 6                  Fax.(work): +49 (0)30-2093 2959
10099 Berlin
Germany                                              [OpenCA Core
Developer]

http://openca.sourceforge.net

Hi

In raserver.conf.in the opencaDir option is still not there in
OpenCA-0.8.0-20010630

regards
Tim

Tim Bouwer wrote:
> 
> Hi
> 
> In raserver.conf.in the opencaDir option is still not there in
> OpenCA-0.8.0-20010630

Is it that option needed into the RAServer ? Keep in mind that RAServer
and CA should be installed on different computers...

-- 

C'you,

	Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                madwolf@...
                                                     madwolf@...
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365

Massimiliano Pala wrote:
> 
> Tim Bouwer wrote:
> >
> > Hi
> >
> > In raserver.conf.in the opencaDir option is still not there in
> > OpenCA-0.8.0-20010630
> 
> Is it that option needed into the RAServer ? Keep in mind that RAServer
> and CA should be installed on different computers...

Hi,
we got the same problem here. In fact in the script 'confirmReq' in
'cgi-raserver/cmds'
is a function call 'libCheckSignature' in Line 48. 
This function is in 'cgi-raserver/lib/crypto-utils.lib' and there is a
'getRequired('opencaDir')' for $opencaDir.
This Variable is used within the function 'libGetSignatureObject' as a
parameter for CA_DIR=>"${opencaDir}/chain" )

It seems that this Keyword is needed. Without it I get Error 690 Missing
Configuration Keyword.
But what value is it to set to?

Regards,
Sven

-- 
******************************************************************
Sven Krewitt 
zentrale Arbeitsstelle Multimedia (zAM)
Zentrum für Informationstechnologie (ZI)
Fachhochschule Köln / University of Applied Sciences Cologne
50678 Köln, Claudiusstr. 1, Tel: +49-221-8275-3936 Fax:-3131
mailto:Sven.Krewitt@..., http://www.zi.fh-koeln.de

Sven Krewitt wrote:
> we got the same problem here. In fact in the script 'confirmReq' in
> 'cgi-raserver/cmds'
> is a function call 'libCheckSignature' in Line 48.
> This function is in 'cgi-raserver/lib/crypto-utils.lib' and there is a
> 'getRequired('opencaDir')' for $opencaDir.
> This Variable is used within the function 'libGetSignatureObject' as a
> parameter for CA_DIR=>"${opencaDir}/chain" )

opencaDir is wrong. The right keyword is ServerDir. It looks like a
mistake during "copy & paste" from the CA's directory lib/.

Massimiliano, because of this mistake and the problems with copy and
paste of libraries, could we rename the variables?

opencaDir and ServerDir --> ServerDir

This would fix the problems and /usr/local/CA and /usr/local/RAServer
have nearly the same structure. The different values are handled from
autoconf.

It should be no problem to find all the opencaDirs with grep.

By the way is the openca-0.8-tree up-to-date so that I can fix it there?

Regards Michael
----------------------------------------------------------------------------
Michael Bell                             Email: michael.bell@...
Rechenzentrum - Datacenter        Email (work):
michael.bell@...
Humboldt-University of Berlin       Tel.(work): +49 (0)30-2093 2482
Unter den Linden 6                  Fax.(work): +49 (0)30-2093 2959
10099 Berlin
Germany                                              [OpenCA Core
Developer]

http://openca.sourceforge.net

Michael Bell wrote:

> opencaDir is wrong. The right keyword is ServerDir. It looks like a
> mistake during "copy & paste" from the CA's directory lib/.

I think this is the mistake...
 
> Massimiliano, because of this mistake and the problems with copy and
> paste of libraries, could we rename the variables?
> 
> opencaDir and ServerDir --> ServerDir
>
> This would fix the problems and /usr/local/CA and /usr/local/RAServer
> have nearly the same structure. The different values are handled from
> autoconf.

There could be some problems in installation (variable subs) and could
lead to some confusion using the same keyword for different values. I'll
try fixing the specific problems in the lib/ (trying to get opencaDir
OR ServerDir and giving error only if there are any of the two).
 
I will report on this ASAP.

-- 

C'you,

	Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                madwolf@...
                                                     madwolf@...
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365

Hi,

Just two lines on the "opencaDir" parameter. I have added a sub into the
misc-utils.lib (either in ca and in raserver) to retrieve at least one
parameter from the passed parameters list.

So using that function it is possible to retrieve at least one of opencaDir
OR ServerDir:

	$opencaDir = getRequiredList( 'opencaDir', 'ServerDir' );

I have not tested it, I will ASAP fixing possible errors...

-- 

C'you,

	Massimiliano Pala

P.S.: I did not changed the $opencaDir variable name ... I think this should
not be confusing... 

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                madwolf@...
                                                     madwolf@...
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365