Re: [Ejbca-develop] Does EJBCA support NoSQL database

[Samuel L. B. <sa...@pr...>]

Hi,



On 2015-06-16 04:19, Wei Shan wrote:
> Hi,
> 
> I believe most NoSQL database support transaction, but it does usually
> only support eventual consistency as a tradeoff in CAP theorem.
> 
> I'm just thinking of this from an academic perspective, are there any
> operations in EJBCA which require strong consistency? 

I would say it depends on how you use EJBCA. For example, if you want to
limit the number of certificates an end-entity can get, then you need
strong consistency. Also, the audit log definitely needs strong
consistency for security reasons.

But OCSP could theoretically work with eventual consistency, as long as
there's some timestamp mechanism so newer writes always "win" over older
writes.

> 1. As long as the cert generation is unique, it can be stored in a
> document instead of rows. The certificate data rarely spread across 2
> tables.
> 2. I found out that, EJBCA doesn't do a lot joins in the SELECT query,
> this is perfect for MongoDB

Yes, I agree. But definitely unsupported :)

Regards,
Samuel


> 
> Please correct me if I'm wrong.
> 
> Thanks!
> 
> On 15 June 2015 at 19:26, Andreas Kuehne <ku...@tr...
> <mailto:ku...@tr...>> wrote:
> 
>     Hi Samuel,
>     assuming this is just an academic discussion: e.g. foundationdb is
>     supporting transactions on a NoSQL base.
> 
>     But just to make sure: I would never ever consider using ejbca with
>     a non-tested database!
> 
>     Greetings,
> 
>     Andreas
> 
>     Am 15. Juni 2015 11:11:10 MESZ, schrieb "Samuel Lidén Borell"
>     <sa...@pr... <mailto:sa...@pr...>>:
> 
>         Hi,
> 
>         It's not supported.
> 
>         I don't think it would work very well. EJBCA uses transactions and NoSQL
>         databases generally don't support transactions (by design, to improve
>         performance and scalability).
> 
>         Regards,
>         Samuel
> 
> 
>         On 2015-06-15 04:38, Wei Shan wrote:
> 
>             Hi all,
> 
>             Does EJBCA support any NoSQL database (Couchbase, MongoDB
>             etc..)? I know
>             it is not listed in as 1 of the supported databases.
>             However, are there
>             any plans to support it in the future?
> 
>             What's the limitations of EJBCA not being able to support
>             NoSQL databases?
> 
>             Thanks!
> 
>             -- 
>             Regards,
>             Ang Wei Shan
> 
> 
>             ------------------------------------------------------------------------
> 
> 
> 
> 
>             ------------------------------------------------------------------------
> 
>             Ejbca-develop mailing list
>             Ejb...@li...
>             <mailto:Ejb...@li...>
>             https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
> 
>         ------------------------------------------------------------------------
> 
>         ------------------------------------------------------------------------
> 
>         Ejbca-develop mailing list
>         Ejb...@li... <mailto:Ejb...@li...>
>         https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
>     --
> 
>     Andreas Kühne 
>     phone: +49 177 293 24 97 <tel:%2B49%20177%20293%2024%2097> 
>     mailto: ku...@tr... <mailto:ku...@tr...> 
> 
>     Trustable Ltd. Niederlassung Deutschland Ströverstr. 18 - 59427 Unna
>     Amtsgericht Hamm HRB 5868 
> 
>     Directors Andreas Kühne, Heiko Veit 
> 
>     Company UK Company No: 5218868 Registered in England and Wales 
> 
>     ------------------------------------------------------------------------------
> 
>     _______________________________________________
>     Ejbca-develop mailing list
>     Ejb...@li...
>     <mailto:Ejb...@li...>
>     https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> 
> 
> 
> 
> -- 
> Regards,
> Ang Wei Shan
> 
> 
> ------------------------------------------------------------------------------
> 
> 
> 
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>