Re: [Ejbca-develop] patch to send approval requests to different email addresses

[Michael S. <mi...@st...>]

Ralf Hornik wrote:
> How about an extra field in the end entity profile properties with the name
> "Approval Email"

Yupp. An option in the end entity profile would be the most appropriate
solution. I guess Andreas would also appreciate that. ;-)

Ciao, Michael.

> -----Ursprüngliche Nachricht-----
> Von: Tomas Gustavsson [mailto:to...@pr...] 
> Gesendet: Montag, 18. April 2016 17:28
> An: ejb...@li...
> Betreff: Re: [Ejbca-develop] patch to send approval requests to different
> email addresses
> 
> 
> Thanks for the patch. Great solution for your use case.
> 
> In EJBCA we're nowadays requiring that configuration can be done in the GUI,
> so users don't have to edit configuration files etc. So I would like to add
> it as Admin GUI configuration somehow.
> 
> Would it be possible for you to outline how such a configuration would
> ideally look if you could decide?
> 
> Regards,
> Tomas
> **********
> PrimeKey Solutions AB
> Lundagatan 16, 171 63 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
> 
> On 2016-04-15 13:36, Andreas Paul wrote:
>> Hi there,
>>
>> we want to send certificate approval requests for different EEPs to 
>> different RA admin email addresses.
>> Currently EJBCA only supports one email address for this under system 
>> configuration.
>>
>> To configure the different RA admins mailing addresses we are using 
>> system properties in the JBoss configuration XML:
>>
>> <system-properties>
>>   <property name="end.entity.profile.1927555933.email"
>> value="pki...@do..."/>
>>   <property name="end.entity.profile.1338322978.email"
>> value="pki...@do..."/>
>>   <property name="end.entity.profile.1101666034.email"
>> value="pki...@do..."/>
>> </system-properties>
>>
>> As you can see we use the unique ID of the end entity which should 
>> send the approval request to the specific email address.
>>
>> You can lookup the unique ID of your end entity by querying your ejbca
>> database:
>>
>> select id, profilename from endentityprofiledata;
>>
>> If there is no specific end entity email address configured if falls 
>> back to the original email address form the system configuration.
>>
>> Github gist link:
>> https://gist.github.com/xorpaul/822ecb5113137ac1c889e87c1ebc10ca
>>
>> Kind regards,
>>
>> Andreas Paul