Re: [Ejbca-develop] Validation Authority Publisher with DB Integrity Protection enabled

[Willi T. <wil...@gm...>]

Hello Tomas,

I am using Community version of EJBCA with rewritten VA Publisher from
older release of Community version.

Does it mean, that in Enterprise version, the database protection in VA
Publisher works (is implemented)?

WT

On Monday, January 2, 2017, Tomas Gustavsson <to...@pr...> wrote:

>
> Hi Willi,
>
> If you are using database integrity protection you are using EJBCA
> Enterprise?
>
> In that case you should contact PrimeKey Support to get a good
> resolution, which there is for Enterprise.
>
> Kind regards,
> Tomas
> **********
> PrimeKey Solutions AB
> Lundagatan 16, 171 63 Solna, Sweden
> Mob: +46 (0)707421096
> Internet: www.primekey.se
> Twitter: twitter.com/primekeyPKI
> **********
>
> On 2016-12-29 13:35, Willi Trace wrote:
> > Hello,
> >
> > I have a setup with one VA as OCSP responder and one CA which
> > has configured Validation Authority Publisher to publish CRLs and issued
> > certificated to VA.
> >
> > VA has enabled database integrity protection.
> >
> > The problem is that when CRL or certificate is published from CA to VA
> > database, it will not have rowprotection and the VA will handle this as
> > exception, thus not working.
> >
> > How to handle this? Is there any way how to add rowprotection when
> > publishing through VAlidation Authority Publisher? I don't want to
> > disable database protection on VA.
> >
> > With regards,
> > WT
> >
> >
> > ------------------------------------------------------------
> ------------------
> > Check out the vibrant tech community on one of the world's most
> > engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> >
> >
> >
> > _______________________________________________
> > Ejbca-develop mailing list
> > Ejb...@li... <javascript:;>
> > https://lists.sourceforge.net/lists/listinfo/ejbca-develop
> >
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li... <javascript:;>
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>