Re: [Ejbca-develop] RE : Re: RE : Re: Ejbca and nCipher with OCS quorum k/N, k>1

[Johan E. <ejb...@pr...>]

Nice!

But this still means that the preloading (load once in one window, use 
without loading the entire cardset) doesn't really work as expected.. 
But I guess you still have a working set up.

Try "call nCipherHSM.cmd generate 1024 test1" to get back control after 
the line has executed.

Great that things worked out!
/J

Jacquet Benjamin skrev:
> Hej!!
>
> I finally found the solution!
>
> Actually, being under Windows certainly was the problem, and to allow 
> communication between the preload process and the "nCipherHSM.cmd 
> generate 4096 testKey", I need to pass the command call as a paramater 
> of preload: "%NFAST_HOME%\bin\preload -c OCS nCipherHSM.cmd generate 
> 1024 key1".
>
> The problem with this is that you need to load the cards for each key 
> to be generated, which is very annoying.
>
> A first solution i thought of was to write a simple script.cmd as follows,
>
> @echo off
> nCipherHSM.cmd generate 1024 test1
> nCipherHSM.cmd generate 1024 test2
> nCipherHSM.cmd generate 1024 test3
>
> and then run "%NFAST_HOME%\bin\preload -c OCS script.cmd", but the 
> problem is that it stops after the first key. Can someone explain why?
>
> Anyway, i found another solution, which consists in writing a script 
> similar to nCipherHSM.cmd, calling java for each key. This works. The 
> script must get the keystore id after the first key is generated, but 
> i guess it's feasible.
>
> Hope that helped other people.
> Cheers,
> /Ben
>
> */Bruno Bonfils <as...@as...>/* a écrit :
>
>     On Fri 26 October, Johan Eklund wrote:
>     > Hi Benjamin,
>     >
>     > The preload from "/opt/nfast/bin/preload
>     $EJBCA_HOME/bin/nCipherHSM.sh
>     > generate 4096 signRoot" in the User Guide example should load
>     all it
>     > needs from the other running preload process..
>     >
>     > Is preload actually running in a separate process in the
>     background when
>     > you execute the command? If it does, it sounds like the two
>     preloads
>     > processes are having trouble to communicate.. are they running
>     as the
>     > same user?
>
>     It may be required to restart the nfast services sometimes. For
>     example,
>     if you preload a first time your OCS cardsets, remove a card, and
>     reinsert it, and use agin preload, it say the OCS is preloaded, while
>     it's false.
>
>     -- 
>     http://asyd.net/home/ - Home Page
>     http://guses.org/home/ - French Speaking (Open)Solaris User Group
>
>     -------------------------------------------------------------------------
>     This SF.net email is sponsored by: Splunk Inc.
>     Still grepping through log files to find problems? Stop.
>     Now Search log events and configuration files using AJAX and a
>     browser.
>     Download your FREE copy of Splunk now >> http://get.splunk.com/
>     _______________________________________________
>     Ejbca-develop mailing list
>     Ejb...@li...
>     https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>
>
> ------------------------------------------------------------------------
> Ne gardez plus qu'une seule adresse mail ! Copiez vos mails 
> <http://www.trueswitch.com/yahoo-fr/> vers Yahoo! Mail
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ejbca-develop mailing list
> Ejb...@li...
> https://lists.sourceforge.net/lists/listinfo/ejbca-develop
>