RE: [Openca-Users] Dataexchange issue

[HATAS,ZDENEK (HP-Czechia,ex1) <zde...@hp...>]

Michael,

thanks for a hint, but I'm afraid, this is not what I need.

Problem occures imediately at the first export of issued certificate.
Here is sample 'workflow':
CA server
=======
Import all data from RA -> Open pending request -> issue certificate ->
enroll all to the RA

In this simple case is no way certificate could appear in "already exported"
state.

So, I'll check that log and let you know.

Zdenek

> -----Original Message-----
> From: Michael Bell [mailto:mic...@cm...] 
> Sent: Friday, April 25, 2003 4:09 PM
> To: ope...@li...
> Subject: Re: [Openca-Users] Dataexchange issue
> 
> 
> HATAS,ZDENEK (HP-Czechia,ex1) wrote:
> > Hi,
> > 
> > I alluded to the problem with a dataexchange between CA and 
> RA on my 
> > OpenCA test infrastructure. Instalation works with OpenCA 
> 0.9.1 on two 
> > RH 7.3 PCs. Dataexchange is realized via scp (as shown in config 
> > files).
> > 
> > My problem is, when I'm trying to export issued 
> certificates from CA, 
> > no certificate is stored in transport tar file.
> > 
> > When I try to do a DB backup(on CA), every issued certificates are 
> > included in backup file, so I think it's not a DB issue.
> > 
> > When I do export, the only informational title ("Exporting valid 
> > CERTIFICATE
> > ...") appears,
> > but no result. Next title follows imediately.
> > 
> > <Sample>
> > Exporting valid CERTIFICATE ...
> > 
> > Exporting archived REQUEST ...
> 
> This happens usually if you have already exported the 
> certificate to the 
> interface. You can check this manually.
> 
> 1. Go to the RA and check for the serial of the node interface 
> (OpenCA/etc/servers/ra_node.conf --> ModuleID).
> 
> 2. Go to the CA and check the file 
> OpenCA/var/log/download/$(module_id)_VALID_CERTIFICATE.log. This file 
> includes all the serials of the exported certificates for 
> which the RA 
> commited the receiving.
> 
> 3. Simply remove some serials.
> 
> This is our implementation of incremental exports.
> 
> Best regards
> 
> Michael
> -- 
> -------------------------------------------------------------------
> Michael Bell                   Email: mic...@cm...
> ZE Computer- und Medienservice            Tel.: +49 (0)30-2093 2482
> (Computing Centre)                        Fax:  +49 (0)30-2093 2704
> Humboldt-University of Berlin
> Unter den Linden 6
> 10099 Berlin                   Email (private): mic...@we...
> Germany                                       http://www.openca.org
> 
> 
> 
> -------------------------------------------------------
> This sf.net email is sponsored by:ThinkGeek
> Welcome to geek heaven.
> http://thinkgeek.com/sf 
> _______________________________________________
> Openca-Users mailing list
> Ope...@li...
> https://lists.sourceforge.net/lists/listinfo/openca-users
>