Re: [Ejbca-develop] Web service functionality

[Smallwood, R. <Rob...@sa...>]

Hi Tomas, 

Thanks for your reply..

My second question is.. and here is the scenario..

1. A certificate has been generated using the web service calls.

2. This certificate now needs to be emailed to a recipient in PKCS12
format.

At this point I'd use a web service call to invoke a custom publisher
which exports the cert and emails it out?

-OR-

Is a custom publisher configured against a Certificate Profile/End
Entity profile type which would then invoke the custom publisher once
the cert has been issued.

Sorry that these are specific use cases..

Kind Regards,

Rob


-----Original Message-----
From: Tomas Gustavsson [mailto:to...@pr...] 
Sent: 13 May 2009 11:22
To: ejb...@li...
Subject: Re: [Ejbca-develop] Web service functionality


Hi Rob,

The web service interface does not have functions to create CAs in 
EJBCA. It's primarily used for managing end entities.

So the quick answers are:
1. No
2. Not if CA B is managed by the same EJBCA instance. Yes if it's 
managed by another instance (then it can be treated as an end entity)
3. Yes

The longer answer is that it's of course quite easy to extend EJBCA with

web service calls for 1 and 2. Since there are EJB interfaces to do it 
with, hooking on a couple of web service calls are not difficult.

Kind regards,
Tomas
-----
PrimeKey Solutions offers a commercial EJBCA support subscription and 
training for EJBCA. Please see www.primekey.se or contact 
in...@pr... for more information.
http://download.primekey.se/documents/ejbca_subscription.pdf
http://download.primekey.se/documents/ejbca_training.pdf


Smallwood, Rob skrev:
> Hi Guys,
> 
>  
> 
> I am evaluating EJBCA and putting together a proposal for creating a
CA 
> within our organisation. So far EJBCA is a strong candidate but I'd
just 
> like to get some tangible confirmation about a requirement I have..
> 
>  
> 
> Hopefully you can answer a couple of questions I have about EJBCA -
(yes 
> I have read the documentation on the site)
> 
>  
> 
> Here's my scenario..
> 
>  
> 
> Using web services, can you:
> 
>  
> 
> 1.       Create a self signed CA certificate called "A" ?
> 
> 2.       Create another CA certificate signed by (A)  called "B"?
> 
> 3.       Create a certificate signed by (B) called "C" ?
> 
>  
> 
> So the question is can EJBCA (just using the web service interfaces) 
> create certificate trust chains?
> 
>  
> 
> If anyone has example code to do this, that would help me illustrate
if 
> this is an easy or difficult thing to achieve?
> 
>  
> 
> Kind Regards,
> 
>  
> 
> Rob
> 
>  
> 
> *Rob Smallwood*
> 
> Senior Java Developer
> 
> Sage SSDP: Online, Mobile & Desktop
> 
> Sage (UK) Ltd
> 
>  
> 
> If you've received this email by mistake, we're sorry for bothering
you. 
> It may contain information that's confidential, so please delete it 
> without sharing it. And if you let us know, we can try to stop it from

> happening again. Thank you.
> 
> We may monitor any emails sent or received by us, or on our behalf. If

> we do, this will be in line with relevant law and our own policies.
> 
> Sage (UK) Limited. Registered in England at North Park, Newcastle upon

> Tyne, NE13 9AA. Registered number 1045967.
> 
> 
>
------------------------------------------------------------------------
> 
>
------------------------------------------------------------------------
------
> The NEW KODAK i700 Series Scanners deliver under ANY circumstances!
Your
> production scanning environment may not be a perfect world - but
thanks to
> Kodak, there's a perfect scanner to get the job done! With the NEW
KODAK i700
> Series Scanner you'll get full speed at 300 dpi even with all image 
> processing features enabled. http://p.sf.net/sfu/kodak-com
> 
> 
>
------------------------------------------------------------------------
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop

------------------------------------------------------------------------
------
The NEW KODAK i700 Series Scanners deliver under ANY circumstances! Your
production scanning environment may not be a perfect world - but thanks
to
Kodak, there's a perfect scanner to get the job done! With the NEW KODAK
i700
Series Scanner you'll get full speed at 300 dpi even with all image 
processing features enabled. http://p.sf.net/sfu/kodak-com
_______________________________________________
Ejbca-develop mailing list
Ejb...@li...
https://lists.sourceforge.net/lists/listinfo/ejbca-develop
If you've received this email by mistake, we're sorry for bothering you. It may contain information that's confidential, so please delete it without sharing it. And if you let us know, we can try to stop it from happening again. Thank you. 

We may monitor any emails sent or received by us, or on our behalf. If we do, this will be in line with relevant law and our own policies.

Sage (UK) Limited. Registered in England at North Park, Newcastle upon Tyne, NE13 9AA. Registered number 1045967.