Menu
▾
▴
openca-cvsdev — CVS Postings
You can subscribe to this list here.
| 2001 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
(164) |
Nov
(133) |
Dec
(307) |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2002 |
Jan
(202) |
Feb
(385) |
Mar
(235) |
Apr
(295) |
May
(258) |
Jun
(293) |
Jul
(199) |
Aug
(404) |
Sep
(439) |
Oct
(417) |
Nov
(360) |
Dec
(146) |
| 2003 |
Jan
(51) |
Feb
(47) |
Mar
(299) |
Apr
(257) |
May
(282) |
Jun
(294) |
Jul
(298) |
Aug
(284) |
Sep
(80) |
Oct
(34) |
Nov
(70) |
Dec
(73) |
| 2004 |
Jan
(227) |
Feb
(239) |
Mar
(206) |
Apr
(108) |
May
(162) |
Jun
(195) |
Jul
(187) |
Aug
(212) |
Sep
(241) |
Oct
(320) |
Nov
(161) |
Dec
(46) |
| 2005 |
Jan
(55) |
Feb
(129) |
Mar
(104) |
Apr
(111) |
May
(14) |
Jun
(211) |
Jul
(330) |
Aug
(314) |
Sep
(20) |
Oct
(90) |
Nov
(12) |
Dec
(39) |
| 2006 |
Jan
(18) |
Feb
(4) |
Mar
|
Apr
(5) |
May
|
Jun
|
Jul
(2) |
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
| 2007 |
Jan
(16) |
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
|
From: <ope...@li...> - 2005-12-21 14:23:15
|
Update of /cvsroot/openca/openca-0.9 In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9 Modified Files: Tag: openca_0_9_2 CHANGES Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: CHANGES =================================================================== RCS file: /cvsroot/openca/openca-0.9/CHANGES,v retrieving revision 1.295.2.68 retrieving revision 1.295.2.69 diff -C2 -d -r1.295.2.68 -r1.295.2.69 *** CHANGES 20 Dec 2005 16:00:22 -0000 1.295.2.68 --- CHANGES 21 Dec 2005 14:22:30 -0000 1.295.2.69 *************** *** 4,7 **** --- 4,8 ---- 2005-Dec-xx: + * fixed wrong utf8 handling in signForm.vbs (Johannes Derek) * fixed format error in syslog call * added LDAP authentication (Peter Gietz) |
|
From: <ope...@li...> - 2005-12-21 14:23:14
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/es_ES In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/es_ES Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/es_ES/Attic/signForm.vbs,v retrieving revision 1.2 retrieving revision 1.2.2.1 diff -C2 -d -r1.2 -r1.2.2.1 *** signForm.vbs 1 Sep 2004 08:08:21 -0000 1.2 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.2.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:14
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/ja_JP In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/ja_JP Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/ja_JP/Attic/signForm.vbs,v retrieving revision 1.2.2.1 retrieving revision 1.2.2.2 diff -C2 -d -r1.2.2.1 -r1.2.2.2 *** signForm.vbs 13 Oct 2005 14:44:50 -0000 1.2.2.1 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.2.2.2 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:14
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/fr_FR In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/fr_FR Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/fr_FR/Attic/signForm.vbs,v retrieving revision 1.3 retrieving revision 1.3.2.1 diff -C2 -d -r1.3 -r1.3.2.1 *** signForm.vbs 1 Sep 2004 08:08:21 -0000 1.3 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.3.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:13
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/pl_PL In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/pl_PL Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/pl_PL/Attic/signForm.vbs,v retrieving revision 1.3.2.1 retrieving revision 1.3.2.2 diff -C2 -d -r1.3.2.1 -r1.3.2.2 *** signForm.vbs 13 Oct 2005 14:44:51 -0000 1.3.2.1 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.3.2.2 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:13
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/ru_RU In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/ru_RU Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/ru_RU/Attic/signForm.vbs,v retrieving revision 1.1 retrieving revision 1.1.2.1 diff -C2 -d -r1.1 -r1.1.2.1 *** signForm.vbs 21 Jun 2005 13:14:15 -0000 1.1 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.1.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:12
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/sl_SI In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/sl_SI Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/sl_SI/Attic/signForm.vbs,v retrieving revision 1.2 retrieving revision 1.2.2.1 diff -C2 -d -r1.2 -r1.2.2.1 *** signForm.vbs 1 Sep 2004 08:08:22 -0000 1.2 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.2.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:10
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/it_IT In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/it_IT Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/it_IT/Attic/signForm.vbs,v retrieving revision 1.2 retrieving revision 1.2.2.1 diff -C2 -d -r1.2 -r1.2.2.1 *** signForm.vbs 1 Sep 2004 08:08:21 -0000 1.2 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.2.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:10
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/de_DE In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/de_DE Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/de_DE/Attic/signForm.vbs,v retrieving revision 1.3 retrieving revision 1.3.2.1 diff -C2 -d -r1.3 -r1.3.2.1 *** signForm.vbs 1 Sep 2004 08:12:23 -0000 1.3 --- signForm.vbs 21 Dec 2005 14:22:30 -0000 1.3.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:10
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/C In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/C Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/C/Attic/signForm.vbs,v retrieving revision 1.3 retrieving revision 1.3.2.1 diff -C2 -d -r1.3 -r1.3.2.1 *** signForm.vbs 1 Sep 2004 08:08:21 -0000 1.3 --- signForm.vbs 21 Dec 2005 14:22:30 -0000 1.3.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:10
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/en_GB In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/en_GB Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/en_GB/Attic/signForm.vbs,v retrieving revision 1.1 retrieving revision 1.1.2.1 diff -C2 -d -r1.1 -r1.1.2.1 *** signForm.vbs 13 Sep 2004 15:05:55 -0000 1.1 --- signForm.vbs 21 Dec 2005 14:22:31 -0000 1.1.2.1 *************** *** 1,12 **** <!--' ! Function UnicodeToAscii(ByRef pstrUnicode) ! Dim i, result ! ! result = "" ! For i = 1 To Len(pstrUnicode) ! result = result & ChrB(Asc(Mid(pstrUnicode, i, 1))) ! Next ! ! UnicodeToAscii = result End Function --- 1,44 ---- <!--' ! ! Function UTF16toUTF8ByteArray(strUTF16) ! Dim i, UTF16, UTF8 ! Dim aryTmp, strTmp ! For i=1 To Len(strUTF16) ! UTF16 = AscW(Mid(strUTF16, i, 1)) ! aryTmp = ToUTF8(UTF16) ! For Each strTmp In aryTmp ! If Len(Hex(strTmp)) > 1 Then ! UTF8 = UTF8 & Hex(strTmp) ! Else ! UTF8 = UTF8 & "0" & Hex(strTmp) ! End If ! Next ! Next ! ! Dim CapicomUtil ! Set CapicomUtil = CreateObject("CAPICOM.Utilities") ! UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) ! End Function ! ! Function ToUTF8(ByVal UTF16) ! ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes ! Dim BArray() ! If UTF16 < &H80 Then ! ReDim BArray(0) ' one byte UTF-8 ! BArray(0) = UTF16 ' Use number as Is ! Elseif UTF16 < &H800 Then ! ReDim BArray(1) ' two byte UTF-8 ! BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits ! Else ! ReDim BArray(2) ' three byte UTF-8 ! BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits ! BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits ! UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again ! BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits ! End If ! ToUTF8 = BArray ' Return UTF-8 bytes in an Array End Function *************** *** 24,28 **** End If ! SignedData.Content = UnicodeToAscii(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 14:23:07
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/javascript/el_GR In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv8548/openca-0.9/src/common/lib/javascript/el_GR Modified Files: Tag: openca_0_9_2 signForm.vbs Log Message: fixed utf8 problem if signing with VBScript in IE Author of changes: michaelbell Index: signForm.vbs =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/javascript/el_GR/Attic/signForm.vbs,v retrieving revision 1.1.2.1 retrieving revision 1.1.2.2 diff -C2 -d -r1.1.2.1 -r1.1.2.2 *** signForm.vbs 13 Oct 2005 14:44:50 -0000 1.1.2.1 --- signForm.vbs 21 Dec 2005 14:22:30 -0000 1.1.2.2 *************** *** 1,3 **** --- 1,46 ---- <!--' + + Function UTF16toUTF8ByteArray(strUTF16) + Dim i, UTF16, UTF8 + Dim aryTmp, strTmp + For i=1 To Len(strUTF16) + UTF16 = AscW(Mid(strUTF16, i, 1)) + aryTmp = ToUTF8(UTF16) + For Each strTmp In aryTmp + If Len(Hex(strTmp)) > 1 Then + UTF8 = UTF8 & Hex(strTmp) + Else + UTF8 = UTF8 & "0" & Hex(strTmp) + End If + Next + Next + + Dim CapicomUtil + Set CapicomUtil = CreateObject("CAPICOM.Utilities") + UTF16toUTF8ByteArray = CapicomUtil.HexToBinary(UTF8) + End Function + + Function ToUTF8(ByVal UTF16) + ' Convert a 16bit UTF-16BE to 2 or 3 UTF-8 bytes + Dim BArray() + If UTF16 < &H80 Then + ReDim BArray(0) ' one byte UTF-8 + BArray(0) = UTF16 ' Use number as Is + Elseif UTF16 < &H800 Then + ReDim BArray(1) ' two byte UTF-8 + BArray(1) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits + UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits + BArray(0) = &HC0 + (UTF16 And &H1F) ' Use 5 remaining bits + Else + ReDim BArray(2) ' three byte UTF-8 + BArray(2) = &H80 + (UTF16 And &H3F) ' Least Significant 6 bits + UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits + BArray(1) = &H80 + (UTF16 And &H3F) ' Use next 6 bits + UTF16 = UTF16 \ &H40 ' Shift UTF16 number right 6 bits again + BArray(0) = &HE0 + (UTF16 And &HF) ' Use 4 remaining bits + End If + ToUTF8 = BArray ' Return UTF-8 bytes in an Array + End Function + Function signFormIE(theForm, theWindow) Dim SignedData *************** *** 13,17 **** End If ! SignedData.Content = theForm.text.value ' we cannot use normally because MsgBox can only handle up to 1024 characters --- 56,60 ---- End If ! SignedData.Content = UTF16toUTF8ByteArray(theForm.text.value) ' we cannot use normally because MsgBox can only handle up to 1024 characters |
|
From: <ope...@li...> - 2005-12-21 13:29:05
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/locale/de_DE In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv27315/openca-0.9/src/common/lib/locale/de_DE Modified Files: Tag: openca_0_9_2 openca.mo openca.po Log Message: added German translation from Peter Gietz for AC patch Author of changes: michaelbell Index: openca.mo =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/locale/de_DE/openca.mo,v retrieving revision 1.49 retrieving revision 1.49.2.1 diff -C2 -d -r1.49 -r1.49.2.1 Binary files /tmp/cvsI4sHcl and /tmp/cvsWXtbey differ Index: openca.po =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/locale/de_DE/openca.po,v retrieving revision 1.52 retrieving revision 1.52.2.1 diff -C2 -d -r1.52 -r1.52.2.1 *** openca.po 9 Sep 2004 15:21:30 -0000 1.52 --- openca.po 21 Dec 2005 13:28:52 -0000 1.52.2.1 *************** *** 10528,10531 **** --- 10528,10688 ---- msgstr "%A den %e. %B %T (UTC)" + # new Strings from DAASI modifications in ldapAutoCreateCSR + msgid "The PIN generation failed." + msgstr "Die PIN-Generierung ist fehlgeschlagen." + + msgid "" + "other modes of DN_TYPE_LDAP_PINGEN than AUTO not yet implemented." + msgstr "" + "Andere Modi von DN_TYPE_LDAP_PINGEN als AUTO sind noch nicht implementiert." + + msgid "The password generation failed." + msgstr "Die Passwort-Generierung ist fehlgeschlagen." + + msgid "" + "other modes of DN_TYPE_LDAP_PASSWDGEN than AUTO or PIN not yet implemented." + msgstr "" + "Andere Modi von DN_TYPE_LDAP_PASSWDGEN als AUTO oder PIN sind noch nicht implementiert." + + msgid "The key generation mode must be specified." + msgstr "Der Modus zur Schlüsselgenerierung muss angegeben werden." + + msgid "can't contact authentication LDAP server." + msgstr "Konnte keine Verbindung zum LDAP Server herstellen." + + msgid "LDAP Login: Server does not support TLS." + msgstr "LDAP Login: Server unterstützt kein TLS." + + msgid "LDAP Login: Start TLS did not succeed." + msgstr "LDAP Login: Start TLS war nicht erfolgreich." + + msgid "Login as __LOGIN__ to the LDAP server failed. __ERRVAL__" + msgstr "Login als __LOGIN__ am LDAP Server schlug fehl. __ERRVAL__" + + msgid "OpenCA LDAP Authentication failed." + msgstr "OpenCA LDAP Authentifizierung schlug fehl." + + msgid "The first and the second PIN does not match." + msgstr "Die erste und zweite PIN sind nicht gleich." + + msgid "The passphrases for the new private key does not match." + msgstr "Das Passwort für den neuen privaten Schlüssel ist nicht gleich." + + msgid "Cannot create keypair. __ERRVAL__" + msgstr "Kann Schlüsselpaar nicht erzeugen. __ERRVAL__" + + msgid "This request type is not supported by this PKI." + msgstr "Dieser Antragstyp wird von dieser PKI nicht unterstützt." + + msgid "Please confirm your request." + msgstr "Bitte bestätigen Sie den Antrag." + + msgid "confirm" + msgstr "bestätigen" + + msgid "" + "Do you want to create a certificate request with these data?" + msgstr "" + "Wollen Sie ein Zertifizierungsantrag für die untenstehende Email stellen?" + + msgid "back" + msgstr "zurück" + + msgid "Name:" + msgstr "Name:" + + msgid "Emailadress:" + msgstr "E-Mail-Adresse:" + + msgid "Please choose a method for the keygeneration." + msgstr "Bitte wählen Sie eine Methiode zur Schlüsselgenerierung." + + msgid "Mozilla, Netscape or Opera" + msgstr "Mozilla, Netscape oder Opera" + + msgid "Microsoft Internet Explorer" + msgstr "Microsoft Internet Explorer" + + msgid "Serverside key generation" + msgstr "Serverseitige Schlüsselgenerierung" + + msgid "" + "Please enter your user, password and PIN. If you use serverside key generation then you must enter a passphrase for the new key too." + msgstr "" + "Bitte geben Sie Username, Passwort und PIN ein. Wenn Sie serverseitige Schlüsselgenerierung verwenden, müssen Sie für den neuen Schlüssel ebenfalls ein Passwort eingeben." + + msgid "Authentication PIN" + msgstr "Authentifizierungs-PIN" + + msgid "Authentication PIN again" + msgstr "nochmals Authentifizierungs-PIN" + + msgid "Mozilla/Netscape/Opera" + msgstr "Mozilla/Netscape/Opera" + + msgid "Serverside Key and Requestgeneration" + msgstr "Serverseitige Schlüssel- und Antragserstellung" + + msgid "Passphrase for new private key" + msgstr "Passwort für neuen privaten Schlüssel" + + msgid "Passphrase for new private key again" + msgstr "nochmals Passwort für neuen privaten Schlüssel" + + # new Strings from DAASI modifications in myCertView + + msgid "You are not allowed to view this certificate!" + msgstr "Sie haben keine Erlaubnis, dieses Zertifikat einzusehen!" + + msgid "" + "To view the single certificates, please click on the serial number" + msgstr "" + "Um Informationen über einzelne Zertifikate zu sehen, klicken Sie bitte auf die Seriennummer." + # new Strings from DAASI modifications in AC.pm + + msgid "LDAP Login config error: you need to specify cacertpath for TLS." + msgstr "LDAP-Login-Konfigurationsfehler: Sie müssen den CACERTPATH für TLS angeben." + + msgid "LDAP Login: connect to server failed." + msgstr "LDAP Login: Verbindung zum Server schlug fehl." + + msgid "LDAP Login: user not found." + msgstr "LDAP Login: Benutzer nicht gefunden." + + msgid "LDAP Login: more than one user found." + msgstr "LDAP Login: mehr als ein Benutzer gefunden." + + msgid "LDAP Login: password attribute is missing in the entry." + msgstr "LDAP Login: das Passwortattribbut fehlt im Eintrag." + + msgid "LDAP Login config error: unknown passphrasehashing algorithm." + msgstr "LDAP-Login-Konfigurationsfehler: Unbekannter Passwort-Hash-Algorhitmus." + + msgid "LDAP Login failed." + msgstr "LDAP Login schlug fehl." + + msgid "LDAP bind failed: __ERRVAL__" + msgstr "LDAP bind schlug fehl: __ERRVAL__" + + msgid "LDAP Login config error: unknown authentication method." + msgstr "LDAP-LoginKonfigurationsfehler: Unbekannte Authentifizierungsmethode." + + msgid "LDAP Login: no role found for user." + msgstr "LDAP Login: Keine Rolle für Benutzer gefunden." + + msgid "LDAP Login: no RA found for user." + msgstr "LDAP Login: Keine RA für Benutzer gefunden." + + msgid "" + "Request a certificate automatically with LDAP assistance" + msgstr "" + "Automatischer Zertifizierungsantrag mit Daten aus dem LDAP-Verzeichnis" + + # new Strings from DAASI modifications in getStaticPage + + msgid "[Use this link to load all data from an LDAP server]" + msgstr "[Benutzen Sie diesen Link, um alle Daten automatisch aus einem LDAP-Server zu beziehen]" + + #, fuzzy #~ msgid "The CA private key is present.\n" |
|
From: <ope...@li...> - 2005-12-21 13:29:00
|
Update of /cvsroot/openca/openca-0.9/src/common/lib/locale In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv27315/openca-0.9/src/common/lib/locale Modified Files: Tag: openca_0_9_2 openca-extra.pot Log Message: added German translation from Peter Gietz for AC patch Author of changes: michaelbell Index: openca-extra.pot =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/common/lib/locale/openca-extra.pot,v retrieving revision 1.7 retrieving revision 1.7.2.1 diff -C2 -d -r1.7 -r1.7.2.1 *** openca-extra.pot 7 Sep 2004 14:54:53 -0000 1.7 --- openca-extra.pot 21 Dec 2005 13:28:51 -0000 1.7.2.1 *************** *** 194,195 **** --- 194,346 ---- msgid "__STRFTIME_FORMAT_STRING__" msgstr "" + + # new Strings from DAASI modifications in ldapAutoCreateCSR + msgid "The PIN generation failed." + msgstr "" + + msgid "" + "other modes of DN_TYPE_LDAP_PINGEN than AUTO not yet implemented." + msgstr "" + + msgid "The password generation failed." + msgstr "" + + msgid "" + "other modes of DN_TYPE_LDAP_PASSWDGEN than AUTO or PIN not yet implemented." + msgstr "" + + msgid "The key generation mode must be specified." + msgstr "" + + msgid "can't contact authentication LDAP server." + msgstr "" + + msgid "LDAP Login: Server does not support TLS." + msgstr "" + + msgid "LDAP Login: Start TLS did not succeed." + msgstr "" + + msgid "Login as __LOGIN__ to the LDAP server failed. __ERRVAL__" + msgstr "" + + msgid "OpenCA LDAP Authentication failed." + msgstr "" + + msgid "The first and the second PIN does not match." + msgstr "" + + msgid "The passphrases for the new private key does not match." + msgstr "" + + msgid "Cannot create keypair. __ERRVAL__" + msgstr "" + + msgid "This request type is not supported by this PKI." + msgstr "" + + msgid "Please confirm your request." + msgstr "" + + msgid "confirm" + msgstr "" + + msgid "" + "Do you want to create a certificate request with these data?" + msgstr "" + + msgid "back" + msgstr "" + + msgid "Name:" + msgstr "" + + msgid "Emailadress:" + msgstr "" + + msgid "Please choose a method for the keygeneration." + msgstr "" + + msgid "Mozilla, Netscape or Opera" + msgstr "" + + msgid "Microsoft Internet Explorer" + msgstr "" + + msgid "Serverside key generation" + msgstr "" + + msgid "" + "Please enter your user, password and PIN. If you use serverside key generation then you must enter a passphrase for the new key too." + msgstr "" + + msgid "Authentication PIN" + msgstr "" + + msgid "Authentication PIN again" + msgstr "" + + msgid "Mozilla/Netscape/Opera" + msgstr "" + + msgid "Serverside Key and Requestgeneration" + msgstr "" + + msgid "Passphrase for new private key" + msgstr "" + + msgid "Passphrase for new private key again" + msgstr "" + + # new Strings from DAASI modifications in myCertView + + msgid "You are not allowed to view this certificate!" + msgstr "" + + msgid "" + "To view the single certificates, please click on the serial number" + msgstr "" + # new Strings from DAASI modifications in AC.pm + + msgid "LDAP Login config error: you need to specify cacertpath for TLS." + msgstr "" + + msgid "LDAP Login: connect to server failed." + msgstr "" + + msgid "LDAP Login: user not found." + msgstr "" + + msgid "LDAP Login: more than one user found." + msgstr "" + + msgid "LDAP Login: password attribute is missing in the entry." + msgstr "" + + msgid "LDAP Login config error: unknown passphrasehashing algorithm." + msgstr "" + + msgid "LDAP Login failed." + msgstr "" + + msgid "LDAP bind failed: __ERRVAL__" + msgstr "" + + msgid "LDAP Login config error: unknown authentication method." + msgstr "" + + msgid "LDAP Login: no role found for user." + msgstr "" + + msgid "LDAP Login: no RA found for user." + msgstr "" + + msgid "" + "Request a certificate automatically with LDAP assistance" + msgstr "" + + # new Strings from DAASI modifications in getStaticPage + + msgid "[Use this link to load all data from an LDAP server]" + msgstr "" + |
|
From: <ope...@li...> - 2005-12-20 16:00:31
|
Update of /cvsroot/openca/openca-0.9 In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv24735 Modified Files: Tag: openca_0_9_2 CHANGES Log Message: fixed format bug in syslog call Author of changes: mbartosch Index: CHANGES =================================================================== RCS file: /cvsroot/openca/openca-0.9/CHANGES,v retrieving revision 1.295.2.67 retrieving revision 1.295.2.68 diff -C2 -d -r1.295.2.67 -r1.295.2.68 *** CHANGES 15 Dec 2005 13:55:25 -0000 1.295.2.67 --- CHANGES 20 Dec 2005 16:00:22 -0000 1.295.2.68 *************** *** 4,7 **** --- 4,8 ---- 2005-Dec-xx: + * fixed format error in syslog call * added LDAP authentication (Peter Gietz) * fixed bug #1378831 (Julia Dubenskaya) |
|
From: <ope...@li...> - 2005-12-20 16:00:31
|
Update of /cvsroot/openca/openca-0.9/src/modules/openca-log/Logger/Syslog In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv24735/src/modules/openca-log/Logger/Syslog Modified Files: Tag: openca_0_9_2 Sys.pm Unix.pm Log Message: fixed format bug in syslog call Author of changes: mbartosch Index: Sys.pm =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/modules/openca-log/Logger/Syslog/Attic/Sys.pm,v retrieving revision 1.5.2.1 retrieving revision 1.5.2.2 diff -C2 -d -r1.5.2.1 -r1.5.2.2 *** Sys.pm 5 Oct 2004 13:24:59 -0000 1.5.2.1 --- Sys.pm 20 Dec 2005 16:00:22 -0000 1.5.2.2 *************** *** 103,107 **** $self->{priority} =~ s/^\|//; ! return undef if (not syslog $self->{priority}, $msg->getXML); return 1; --- 103,107 ---- $self->{priority} =~ s/^\|//; ! return undef if (not syslog $self->{priority}, "%s", $msg->getXML); return 1; Index: Unix.pm =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/modules/openca-log/Logger/Syslog/Attic/Unix.pm,v retrieving revision 1.1.2.1 retrieving revision 1.1.2.2 diff -C2 -d -r1.1.2.1 -r1.1.2.2 *** Unix.pm 5 Oct 2004 13:24:59 -0000 1.1.2.1 --- Unix.pm 20 Dec 2005 16:00:22 -0000 1.1.2.2 *************** *** 87,91 **** } ! return undef if (not syslog $self->{priority}, $msg->getXML); return 1; --- 87,91 ---- } ! return undef if (not syslog $self->{priority}, "%s", $msg->getXML); return 1; |
|
From: <ope...@li...> - 2005-12-19 20:45:16
|
Update of /cvsroot/openca/openca-0.9/docs/guide In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv13386/docs/guide Modified Files: Tag: openca_0_9_2 Makefile openca-guide.html openca-guide.pdf Log Message: Small doc/contrib changes. --- madwolf Author of changes: madwolf Index: Makefile =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/Attic/Makefile,v retrieving revision 1.38.2.3 retrieving revision 1.38.2.4 diff -C2 -d -r1.38.2.3 -r1.38.2.4 *** Makefile 5 Aug 2005 16:10:50 -0000 1.38.2.3 --- Makefile 19 Dec 2005 20:44:17 -0000 1.38.2.4 *************** *** 71,79 **** ## DOCBOOK=/usr/share/sgml/docbook/docbook-xsl-1.60.1 ## DOCBOOK=/usr/share/sgml/docbook/docbook-xsl-1.61.2 ! DOCBOOK=/usr/share/xml/docbook/stylesheet/nwalsh/ ## please notice that $APACHE_FOP_DIR/lib must contain the jar files from JAI APACHE_FOP_DIR=/usr/lib/fop-0.20.5 ! FOP_SH=export JAVA_HOME=/usr/lib/java2; $(APACHE_FOP_DIR)/fop.sh .SUFFIXES :.html .pdf .xml .xml_all .fo .ps .rtf --- 71,81 ---- ## DOCBOOK=/usr/share/sgml/docbook/docbook-xsl-1.60.1 ## DOCBOOK=/usr/share/sgml/docbook/docbook-xsl-1.61.2 ! ## DOCBOOK=/usr/share/xml/docbook/stylesheet/nwalsh/ ! DOCBOOK=/usr/share/sgml/docbook/xsl-stylesheets-1.68.1-1 ## please notice that $APACHE_FOP_DIR/lib must contain the jar files from JAI APACHE_FOP_DIR=/usr/lib/fop-0.20.5 ! # FOP_SH=export JAVA_HOME=/usr/lib/java2; $(APACHE_FOP_DIR)/fop.sh ! FOP_SH=$(APACHE_FOP_DIR)/fop.sh .SUFFIXES :.html .pdf .xml .xml_all .fo .ps .rtf Index: openca-guide.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/Attic/openca-guide.html,v retrieving revision 1.92.2.4 retrieving revision 1.92.2.5 diff -C2 -d -r1.92.2.4 -r1.92.2.5 *** openca-guide.html 5 Aug 2005 16:10:51 -0000 1.92.2.4 --- openca-guide.html 19 Dec 2005 20:44:17 -0000 1.92.2.5 *************** *** 1,34 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>OpenCA Guide for Versions 0.9.2+</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="book" lang="en"><div class="titlepage"><div><div><h1 class="title"><a name="id2451080"></a>OpenCA Guide for Versions 0.9.2+</h1></div><div><p class="copyright">Copyright © 2002, 2003, 2004 <span class="trademark"> OpenCA Group ! </span>™</p></div></div><hr></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="preface"><a href="#id2451116">Introduction</a></span></dt><dt><span class="part"><a href="#id2451286">I. Design Guide</a></span></dt><dd><dl><dt><span class="preface"><a href="#id2451295">Preface</a></span></dt><dt><span class="chapter"><a href="#id2451326">1. General Design</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2451339">1. Basic Hierarchy</a></span></dt><dt><span class="sect1"><a href="#id2451538">2. Interfaces</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2451670">2.1. Node</a></span></dt><dt><span class="sect2"><a href="#id2451706">2.2. CA</a></span></dt><dt><span class="sect2"><a href="#id2451729">2.3. RA</a></span></dt><dt><span class="sect2"><a href="#id2451742">2.4. LDAP</a></span></dt><dt><span class="sect2"><a href="#id2451756">2.5. Pub</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2451824">3. Configuration</a></span></dt><dt><span class="sect1"><a href="#id2451833">4. Database</a></span></dt><dt><span class="sect1"><a href="#id2451841">5. Interface</a></span></dt><dt><span class="sect1"><a href="#id2451850">6. Life cycle of the objects</a></span></dt><dt><span class="sect1"><a href="#id2451953">7. Sub-Ca</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2451958">7.1. Example 1</a></span></dt><dt><span class="sect2"><a href="#id2451969">7.2. Example 2</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#id2451983">2. Recommendations</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2451997">1. Hardware Issues</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2452009">1.1. Time</a></span></dt><dt><span class="sect2"><a href="#id2450945">1.2. Failing disks</a></span></dt><dt><span class="sect2"><a href="#id2450966">1.3. Hardware monitoring</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2450992">2. Physical Security</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2450998">2.1. Safes and Data organization</a></span></dt><dt><span class="sect2"><a href="#id2450458">2.2. Buildings</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2451052">3. Network Issues</a></span></dt><dt><span class="sect1"><a href="#id2452634">4. Certificate Issues</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2452648">4.1. CDPs</a></span></dt><dt><span class="sect2"><a href="#id2452768">4.2. Application specific problems</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2452871">5. Organizational Aspects</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2452877">5.1. Dual Access Control</a></span></dt><dt><span class="sect2"><a href="#id2452888">5.2. Privacy vs. Security</a></span></dt><dt><span class="sect2"><a href="#id2452900">5.3. Enforcement of Access Control</a></span></dt><dt><span class="sect2"><a href="#id2452912">5.4. Privacy Officer Integration</a></span></dt><dt><span class="sect2"><a href="#id2452927">5.5. Enterprise Integration</a></span></dt><dt><span class="sect2"><a href="#id2452939">5.6. Parallel use of several end user PKIs</a></span></dt></dl></dd></dl></dd></dl></dd><dt><span class="part"><a href="#id2453004">II. Installation and Configuration Guide</a></span></dt><dd><dl><dt><span class="preface"><a href="#id2453013">Preface</a></span></dt><dt><span class="chapter"><a href="#id2453027">3. Installation</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2453033">1. Preparations</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2453038">1.1. Software</a></span></dt><dt><span class="sect2"><a href="#id2453145">1.2. Hardware</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2453182">2. Configure</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2453242">2.1. Host System Configuration</a></span></dt><dt><span class="sect2"><a href="#id2453383">2.2. Filesystem paths</a></span></dt><dt><span class="sect2"><a href="#id2453492">2.3. Webserver specific stuff</a></span></dt><dt><span class="sect2"><a href="#id2453622">2.4. Email</a></span></dt><dt><span class="sect2"><a href="#id2453636">2.5. Compiling features</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2453661">3. Installation</a></span></dt><dt><span class="sect1"><a href="#id2453816">4. config.xml (for RPMs and DEBs too)</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2453868">4.1. Configuration sections of <code class="filename">config.xml</code></a></span></dt><dt><span class="sect2"><a href="#admin_post_install_two_node_setup">4.2. How to setup two management interfaces on one server?</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#id2454614">4. Configuration</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2454620">1. Access Control</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2454798">1.1. Channel verification</a></span></dt><dt><span class="sect2"><a href="#id2454860">1.2. Login</a></span></dt><dt><span class="sect2"><a href="#id2455165">1.3. Session management</a></span></dt><dt><span class="sect2"><a href="#id2455196">1.4. ACLs</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2455637">2. Token and keyconfiguration</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2455884">2.1. OpenSSL</a></span></dt><dt><span class="sect2"><a href="#id2456074">2.2. Empty</a></span></dt><dt><span class="sect2"><a href="#id2456089">2.3. LunaCA3</a></span></dt><dt><span class="sect2"><a href="#id2456267">2.4. nCipher</a></span></dt><dt><span class="sect2"><a href="#id2456933">2.5. OpenSC</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2457124">3. OpenSSL</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2457166">3.1. Certificate Extensions</a></span></dt><dt><span class="sect2"><a href="#id2457449">3.2. Profiles</a></span></dt></dl></dd><dt><span class="sect1"><a href="#admin_guide_csr">4. CSRs</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2457670">4.1. Additional Attributes</a></span></dt><dt><span class="sect2"><a href="#id2457830">4.2. PKCS#10 Requests</a></span></dt><dt><span class="sect2"><a href="#id2457886">4.3. Basic CSR</a></span></dt><dt><span class="sect2"><a href="#id2458250">4.4. SCEP</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2458264">5. Subject</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2458270">5.1. Common stuff</a></span></dt><dt><span class="sect2"><a href="#id2458433">5.2. dc style</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2458616">6. Subject Alternative Name</a></span></dt><dt><span class="sect1"><a href="#id2458672">7. LDAP</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2458693">7.1. Configuration of the Directory</a></span></dt><dt><span class="sect2"><a href="#id2458755">7.2. Configuration of the online components</a></span></dt><dt><span class="sect2"><a href="#id2459075">7.3. Writing Certificates to the Directory</a></span></dt><dt><span class="sect2"><a href="#admin_ldap_schema_change">7.4. Adding an attribute to the LDAP schema</a></span></dt></dl></dd><dt><span class="sect1"><a href="#admin_guide_scep">8. SCEP</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2459279">8.1. <code class="filename">OPENCADIR/etc/servers/scep.conf</code></a></span></dt><dt><span class="sect2"><a href="#id2459475">8.2. <code class="filename">OPENCADIR/etc/config.xml</code></a></span></dt></dl></dd><dt><span class="sect1"><a href="#config_dataexchange">9. Dataexchange</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2459545">9.1. Configuration</a></span></dt><dt><span class="sect2"><a href="#id2459957">9.2. Adding a new node</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2460011">10. Databases</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2460017">10.1. PostgreSQL</a></span></dt><dt><span class="sect2"><a href="#id2460318">10.2. MySQL</a></span></dt><dt><span class="sect2"><a href="#id2460359">10.3. Oracle</a></span></dt><dt><span class="sect2"><a href="#id2460808">10.4. DBM Files</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2460869">1 1. Email</a></span></dt><dd><dl><dt><span class="sect2"><a href="#admin_sendmail_login">11.1. Sendmail with basic SMTP authentication</a></span></dt></dl></dd></dl></dd></dl></dd><dt><span class="part"><a href="#id2460966">III. User Guide</a></span></dt><dd><dl><dt><span class="preface"><a href="#id2460975">Preface</a></span></dt><dt><span class="chapter"><a href="#id2460987">5. Interface Descriptions</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2460993">1. Public PKI Server</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2461010">1.1. General</a></span></dt><dt><span class="sect2"><a href="#id2461033">1.2. CA Infos</a></span></dt><dt><span class="sect2"><a href="#id2461115">1.3. User</a></span></dt><dt><span class="sect2"><a href="#id2461471">1.4. Certificates</a></span></dt><dt><span class="sect2"><a href="#id2461642">1.5. Requests</a></span></dt><dt><span class="sect2"><a href="#id2461685">1.6. Language</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2461698">2. Registration Authority</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2461722">2.1. General</a></span></dt><dt><span class="sect2"><a href="#id2461765">2.2. Active CSRs</a></span></dt><dt><span class="sect2"><a href="#id2461896">2.3. Active CRRs</a></span></dt><dt><span class="sect2"><a href="#id2461990">2.4. Information</a></span></dt><dt><span class="sect2"><a href="#id2462187">2.5. Utilities</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2462234">3. Registration Authority Node</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2462246">3.1. General</a></span></dt><dt><span class="sect2"><a href="#id2462317">3.2. Administration</a></span></dt><dt><span class="sect2"><a href="#id2462634">3.3. Utilites</a></span></dt><dt><span class="sect2"><a href="#id2462711">3.4. Logs</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2462745">4. LDAP Interface</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2462756">4.1. Update LDAP</a></span></dt><dt><span class="sect2"><a href="#id2462804">4.2. View CA-Certificates</a></span></dt><dt><span class="sect2"><a href="#id2462888">4.3. View Certificates</a></span></dt><dt><span class="sect2"><a href="#id2463159">4.4. View CRLs</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#id2463218">6. Functionality Descriptions</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2463224">1. CA Initialization</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2463294">1.1. Phase I: Initialize the Certification Authority</a></span></dt><dt><span class="sect2"><a href="#id2463563">1.2. Phase II and III: Create the initial administrator and RA certificate</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2463779">2. Node Initialization</a></span></dt><dt><span class="sect1"><a href="#user_guide_csr_handling">3. CSR Handling - a request HOWTO</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2463887">3.1. Ways to request a certificate</a></span></dt><dt><span class="sect2"><a href="#id2464286">3.2. Edit a certificate signing requests</a></span></dt><dt><span class="sect2"><a href="#id2464397">3.3. Approve certificate signing requests</a></span></dt><dt><span class="sect2"><a href="#id2464412">3.4. Issue a certificate from a certificate signing request</a></span></dt><dt><span class="sect2"><a href="#id2464428">3.5. Certificate enrollment</a></span></dt><dt><span class="sect2"><a href="#id2464442">3.6. Delete certificate signing requests</a></span></dt></dl></dd><dt><span class="sect1"><a href="#user_guide_cert_handling">4. Certificate Handling</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2464483">4.1. Find a certificate</a></span></dt><dt><span class="sect2"><a href="#id2464529">4.2. Download</a></span></dt><dt><span class="sect2"><a href="#id2464693">4.3. Start revocation</a></span></dt><dt><span class="sect2"><a href="#id2464702">4.4. Write an email to the owner</a></span></dt><dt><span class="sect2"><a href="#id2464711">4.5. Informational messages and their meaning</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2464723">5. <a href="#glossary_SCEP"><em class="glossterm">SCEP</em></a></a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2464748">5.1. SSCEP</a></span></dt><dt><span class="sect2"><a href="#id2464848">5.2. NetScreen ScreenOS</a></span></dt><dt><span class="sect2"><a href="#id2465002">5.3. F-Secure VPN+</a></span></dt><dt><span class="sect2"><a href="#id2465143">5.4. Cisco PIX</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#id2465179">7. Client Support</a></span></dt><dd><dl><dt><span class="sect1"><a href="#user_clients">1. Introduction</a></span></dt><dt><span class="sect1"><a href="#user_mozilla">2. Mozilla</a></span></dt><dd><dl><dt><span class="sect2"><a href="#user_mozilla_general">2.1. General</a></span></dt><dt><span class="sect2"><a href="#user_mozilla_1">2.2. Mozilla</a></span></dt><dt><span class="sect2"><a href="#user_mozilla_netscape_4">2.3. Netscape 4</a></span></dt><dt><span class="sect2"><a href="#user_opera">2.4. Opera</a></span></dt></dl></dd><dt><span class="sect1"><a href="#user_microsoft">3. Microsoft</a></span></dt><dd><dl><dt><span class="sect2"><a href="#user_microsoft_dc">3.1. Domaincontroller</a></span></dt><dt><span class="sect2"><a href="#user_microsoft_smartcardlogon">3.2. Smartcard Logon</a></span></dt><dt><span class="sect2"><a href="#user_microsoft_keystore">3.3. Keystore</a></span></dt><dt><span class="sect2"><a href="#user_microsoft_ie">3.4. Internet Explorer</a></span></dt><dt><span class="sect2"><a href="#user_microsoft_outlook">3.5. Outlook</a></span></dt><dt><span class="sect2"><a href="#user_microsoft_outlook_express">3.6. Outlook Express</a></span></dt></dl></dd></dl></dd></dl></dd><dt><span class="part"><a href="#id2466264">IV. Technology Guide</a></span></dt><dd><dl><dt><span class="preface"><a href="#id2466273">Preface</a></span></dt><dt><span class="chapter"><a href="#id2466296">8. Introduction</a></span></dt><dd><dl><dt><span class="sect1"><a href="#slot">1. Slotechnology</a></span></dt></dl></dd><dt><span class="chapter"><a href="#tech_XML">9. XML</a></span></dt><dt><span class="chapter"><a href="#tech_Crypto">10. Cryptolayer</a></span></dt><dt><span class="chapter"><a href="#tech_AC">11. Accesscontrol</a></span></dt><dt><span class="chapter"><a href="#tech_Log">12. Logging</a></span></dt><dt><span class="chapter"><a href="#tech_Web">13. Webinterfaces</a></span></dt><dd><dl><dt><span class="sect1"><a href="#interfaces">1. Interfacebuilding</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2467270">1.1. Technology overview</a></span></dt><dt><span class="sect2"><a href="#id2467439">1.2. Customization capabilities</a></span></dt></dl></dd><dt><span class="sect1"><a href="#CSS">2. CSS</a></span></dt><dt><span class="sect1"><a href="#configure_etc">3. Configuration after installation</a></span></dt></dl></dd><dt><span class="chapter"><a href="#tech_hierarchy">14. Hierarchy</a></span></dt><dd><dl><dt><span class="sect1"><a href="#node">1. Nodemanagement</a></span></dt><dt><span class="sect1"><a href="#dataexchange">2. Dataexchange</a></span></dt></dl></dd><dt><span class="chapter"><a href="#tech_ldap">15. LDAP</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2467912">1. LDAP schema specification</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2467918">1.1. Used objectclasses</a></span></dt><dt><span class="sect2"><a href="#id2468013">1.2. Supported attributes</a></span></dt><dt><span class="sect2"><a href="#id2468083">1.3. Common definitions for distinguished names</a></span></dt><dt><span class="sect2"><a href="#id2468345">1.4. Special definitions for user certificates</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2468479">2. Sourcecodeorganization</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2468485">2.1. Structure of the code</a></span></dt><dt><span class="sect2"><a href="#id2468507">2.2. The relevant commands</a></span></dt><dt><span class="sect2"><a href="#id2468592">2.3. export-import.lib</a></span></dt><dt><span class="sect2"><a href="#i d2468603">2.4. ldap-utils.lib</a></span></dt><dt><span class="sect2"><a href="#id2468630">2.5. OpenCA::LDAP</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#tech_batch">16. Batch System</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2468683">1. Requirements</a></span></dt><dt><span class="sect1"><a href="#id2468718">2. Design</a></span></dt><dt><span class="sect1"><a href="#id2468795">3. Data Import</a></span></dt><dt><span class="sect1"><a href="#id2469023">4. Change the workflow</a></span></dt><dt><span class="sect1"><a href="#id2469237">5. Default workflow</a></span></dt><dt><span class="sect1"><a href="#id2469489">6. What about the different crypto tokens?</a></span></dt><dt><span class="sect1"><a href="#id2469535">7. Performance</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2469541">7.1. PIII 850MHz, 256 MB RAM</a></span></dt></dl></dd></dl></dd><dt><span class="chapter"><a href="#tech_packaging">17. Packaging</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2469764">1. Common Notices</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2469770">1.1. Required Perl modules</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2469881">2. RPM-based system</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2469887">2.1. RedHat/Feodora</a></span></dt><dt><span class="sect2"><a href="#id2469897">2.2. SuSE</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2470247">3. Debian</a></span></dt><dt><span class="sect1"><a href="#id2470256">4. BSD</a></span></dt></dl></dd><dt><span class="chapter"><a href="#id2470267">18. Software Design (legacy from design guide)</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2470273">1. Database(s)</a></span></dt><dt><span class="sect1"><a href="#id2470282">2. Interface construction</a></span></dt><dt><span class="sect1"><a href="#id2470291">3. openca.cgi</a></span></dt><dt><span class="sect1"><a href="#id2470300">4. libraries</a></span></dt><dt><span class="sect1"><a href="#id2470309">5. modules</a></span></dt><dt><span class="sect1"><a href="#id2470318">6. commands</a></span></dt><dt><span class="sect1"><a href="#id2470326">7. Dataexchange and Node management</a></span></dt></dl></dd></dl></dd><dt><span class="appendix"><a href="#id2470338">A. History</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2470352">1. PKI Scenario before OpenCA</a></span></dt><dt><span class="sect1"><a href="#id2470468">2. PKI and eGovernment</a></span></dt><dt><span class="sect1"><a href="#id2470495">3. Internet Standards</a></span></dt><dt><span class="sect1"><a href="#id2470517">4. The Project's Purposes</a></span></dt><dt><span class="sect1"><a href="#id2470568">5. The Project's Achievements</a></span></dt><dt><span class="sect1"><a href="#id2470661">6. The OpenCA Project</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2470667">6.1. The project start</a></span></dt><dt><span class="sect2"><a href="#id2470731">6.2. Offering Help to Other Projects: OpenSSL</a></span></dt><dt><span class="sect2"><a href="#id2470779">6.3. CVS and Mailing Lists</a></span></dt><dt><span class="sect2"><a href="#id2470811">6.4. The Open Source Choice</a></span></dt><dt><span class="sect2"><a href="#id2470842">6.5. Migrating to SourceForge</a></span></dt></dl></dd></dl></dd><dt><span class="appendix"><a href="#id2470871">B. References</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2470891">1. Universities</a></span></dt></dl></dd><dt><span class="appendix"><a href="#id2471037">C. Internationalization - i18n</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2471059">1. de_DE</a></span></dt><dt><span class="sect1"><a href="#id2471074">2. it_IT</a></span></dt><dt><span class="sect1"><a href="#id2471088">3. ja_JP</a></span></dt><dt><span class="sect1"><a href="#id2471107">4. pl_PL</a></span></dt><dt><span class="sect1"><a href="#id2471121">5. sl_SI</a></span></dt></dl></dd><dt><span class="appendix"><a href="#id2471149">D. Authors and Contributors</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2471162">1. Martin Bartosch</a></span></dt><dt><span class="sect1"><a href="#id2471176">2. Michael Bell</a></span></dt><dt><span class="sect1"><a href="#id2471191">3. Chris Covell</a></span></dt><dt><span class="sect1"><a href="#id2471205">4. Massimiliano Pala</a></span></dt><dt><span class="sect1"><a href="#id2471218">5. Ulrich Bathels</a></span></dt><dt><span class="sect1"><a href="#id2471236">6. Ashutosh Jaiswal</a></span></dt><dt><span class="sect1"><a href="#id2471250">7. FAQ</a></span></dt></dl></dd><dt><span class="appendix"><a href="#id2471285">E. FAQ</a></span></dt><dd><dl><dt><span class="sect1"><a href="#id2471293">1. General PKI Issues</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2471299">1.1. What is a certificate?</a></span></dt><dt><span class="sect2"><a href="#id2471319">1.2. Which informations does a certificate contain?</a></span></dt><dt><span class="sect2"><a href="#id2471379">1.3. What is a request?</a></span></dt><dt><span class="sect2"><a href="#id2471408">1.4. Which information does a <a href="#glossary_CSR"><em class="glossterm">CSR</em></a> contain?</a></span></dt><dt><span class="sect2"><a href="#id2471449">1.5. What is a <a href="#glossary_CA"><em class="glossterm">CA</em></a>?</a></span></dt><dt><span class="sect2"><a href="#id2471463">1.6. Why should I not place the <a href="#glossary_CA"><em class="glossterm">CA</em></a> on the same machine like ! the <a href="#glossary_RA"><em class="glossterm">RA</em></a>?</a></span></dt><dt><span class="sect2"><a href="#id2471485">1.7. What is an extensions?</a></span></dt><dt><span class="sect2"><a href="#id2471494">1.8. I use Windows 2000 and Internet Explorer 6 SP1 and it don't ! show any CSPs.</a></span></dt><dt><span class="sect2"><a href="#id2471532">1.9. How can I setup a sub CA?</a></span></dt></dl></dd><dt><span class="sect1"><a href="#id2471601">2. General OpenCA Issues</a></span></dt><dd><dl><dt><span class="sect2"><a href="#id2471606">2.1. Does it be possible to revoke a certificate without any user ! interaction?</a></span></dt><dt><span class="sect2"><a href="#id2471629">2.2. I try to add a role and get the message ! “<span class="quote">The role XYZ exists already!</span>”</a></span></dt><dt><span class="sect2"><a href="#id2471654">2.3. All cryptographic operations fail.</a></span></dt><dt><span class="sect2"><a href="#id2471675">2.4. Apache's error_log reports a nonexistent option ! <code class="option">-subj</code> of <span><strong class="command">openssl req</strong></span></a></span></dt><dt><span class="sect2"><a href="#id2471706">2.5. Apache's error_log contains a message from IBM DB2 that the ! environment is not setted</a></span></dt><dt><span class="sect2"><a href="#id2471725">2.6. What do the new features of 0.9.2 be?</a></span></dt><dt><span class="sect2"><a href="#id2471811">2.7. I try to approve and sign a request with Mozilla and it fails.</a></span></dt><dt><span class="sect2"><a href="#id2471831">2.8. I try to approve and sign a request with Konqueror (KDE) and it fails.</a></span></dt><dt><span class="sect2"><a href="#id2471844">2.9. How is the format of the disc to import the CA certificate [...5172 lines suppressed...] ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569527"></a>1.8. Automated CA Key rollover</h3></div></div></div><p> When reaching the end of the CA certificate lifetime, there is a certain point after which no usable end entity certificates can be issued whose desired validity *fully* fits into the CA certificates validity. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569541"></a>1.9. Function to process signing and encryption keys in one go</h3></div></div></div><p> OpenCA could introduce the idea of "certificate profiles" where a user "requests" once but gets a "Profile" of certificate types". Secure storage and recovery of encryption keys would be part of this mechanism. The start of this is in the new Batch processes in the form of the "Process". ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569556"></a>1.10. Secure storage and recovery of encryption keys</h3></div></div></div><p> A function to provide (optional) key backup and recovery. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569568"></a>1.11. Web based OpenCA configuration and management</h3></div></div></div><p> Enhancing the existing management screens to allow management of certificate roles and extensions, access control settings and node management i.e. a front end to the OpenSSL config files. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569582"></a>1.12. Improved key lifecycle management</h3></div></div></div><p> Screens to allow users to renew their certificates, modify DN's etc. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569593"></a>1.13. Authentication via a third party</h3></div></div></div><p> The ability to allow a user to request a certificate and authenticate themselves the authentication token is then checked against an independent directory. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569606"></a>1.14. Improved debugging support</h3></div></div></div><p> I frequently get lost in the system when trying to debug things, often I wonder what functions get executed by OpenCA, the CGI system seems very opaque to me (and I consider myself an experienced Perl hacker) ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569620"></a>1.15. Improved error handling</h3></div></div></div><p> I have seen OpenCA report crude error messages on seemingly harmless error conditions. When checking the code it was often something like an uninitialized variable that was used to call a method on. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2569634"></a>1.16. Accreditation</h3></div></div></div><p> Achieve Common Criteria/FIPS accreditation ! This is a long way off, but with OpenSSL being pushed through, then it may be possible !!! </p></div></div></div></div></body></html> Index: openca-guide.pdf =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/Attic/openca-guide.pdf,v retrieving revision 1.88.2.4 retrieving revision 1.88.2.5 diff -C2 -d -r1.88.2.4 -r1.88.2.5 *** openca-guide.pdf 5 Aug 2005 16:11:10 -0000 1.88.2.4 --- openca-guide.pdf 19 Dec 2005 20:44:18 -0000 1.88.2.5 *************** *** 657,661 **** >> stream ! Gb"/l?$"^Z'Sc)P(!Q#=1HS5\>Q240,jf,$D,[+>(H[!&J,jN(:2Q+?s*cO=j5WN6m;u8GGh\]X)FG(2o-0`HFS'n73IPC]RF*h%j&sFdc9&+CAH,faGHsE!R6B\Ua/eXcYB]N3qjV<#7pc_bBGSnF8Kbo1;VdqJ]%%J5"!A-\oRE"F\O+S:])Qlm^Md,0RHbC9?sB%.7&KgEM+H*aCrmr/Af[1I2E`;s#h1=Yanm+9+C[\!A?Z?681^g%>EOTFE3`aQfl#8+"+^r=G*o;q'2pcFWF!U9:mn-@Ybm0U!eK&lV4a3%6#f"2-l*DZ;7;T8J*$9^<=f=TYnE0u11TjO#6k7s5F(BQp#_YoYUf=@%a"_.;XO)GEt8>'*pJN`oc#sIg$/n"4cJFI,-%(t1p%[g`Vnk+oYWue!sEoN]63f4!6Z^493lW]DF?<"?(PFQ!!4/pPlfq/"iB=g+QuVuq<CH+.s^WcVM>-QJ_D7l^0X9r7:_(_"#&8'0^)_58.;E\6%D4n7KgR^M*OmmA2FR1(*^j]\EPk6#S7:6dm_/4[%_"+N/33_6mMG4$re1k$P;NhW726(Ur)i*UdVd)WVi;F1O=NDcY^jU5TnFf;(4kmId,ke7##Hed3=]A0!qQ<cgRZc<8*SZc/='2K*-\uMftJ_m1FE8@?.B6SqTh2m*<&$SH&^3&XBBd-obDs-+L!?e3+`43Ktk<%j2F^;=2d:>\qS,g/U6#4e7<W+#>&&1](&siUp@ilQ?j2^-SEYYtNOmG$3RVr%T&e_MkL).))cO.eBqS*^ZVEcq>:Yo0a.QEFQ./V!pE9_oW5@'k@a`9*KkVJP'4pQW10uMs(4b%u^_U="!9<7H5TmJO"(G;GSjGZ]Y,bL*TK9)Qg4C'bd"M;r^4FJO"u_:C:(XcTO`#Wg;'EY?&$i9.JQ"R<iM+@P8j#lY)'I]*:!3lCsd]G=O.OQ[&e!K3F9Xcr&5O/WF$^5rqD'W\$p_IU#L-7"Gbb8P\@D@&7$B_te?bkbm1Brd4n4<@4P8D#3_(YFM2ohZ<o^[6q3Vm>U->`N&ee*gEQQ]&Qr4E^<_OB46rT>N/&9`Sh#aUd09&4&!\:M!7`3_"X9m*%f'aZmYD/-B:J>b=cKtM+k*)h[4&SWLVT:j$9-fA7!`TT"gFbL=)Mbo]iq-\K=D_:X&Fa:P98)(oX^=YHJ5S%8NdLXYTZn>+><gdIj0V&,uhI.!L83/"J60.T"^S^lJToTc'ssV.KI&,*ka]o-OpiArV:h&.!AO<%=45%#F#57'VtH,(JhKNPE/7Gl%Ptp$CB?5$XYn+8!l3L8R@5:/d;1MBk>Z-fV#$b3a-)bC9(iQH^KKnTK:_TN4`YQ]XjRI`%s,0;q[hinB1Eh.lc@Cc)%pJ$g<S''T+(@i=^0'0sM<e#DnHr;?*EQ"PXV`8+r97!#d7;($6c1EmA9e1*%!IV$&c[,ec*'Lt#)&?*j\_pg9!QoY\J4n>s\(l>Gl&Pr!,30&[r#kXiLXNt:^9QH2o5tkC_rNCi1NsTjZ-O9kO6,b9R%EtN'6[&f;E@U..(k'?)N?HRh;/,UtbM"PcVC#)_$LdBjCZd=U9gPESV,AE-fnuZQWBSgL2+`BkIL;EgG12'DJO$=L%F:cC5ncE-?GENZD`3q(E#6X=+OH_-7Kg@o2%"F!V<M$k?AuH.c<!<1b(!V(?3CfFe=9DOb8#e0V4q-N'%(eG=.>ebTj1R!lZsH2dCV+nIM/aD6:=_Bh^[&(i&:gfpDhGkDe_b,;tT)/K$;S;BmtR-VY,*Qk$`V++b9k$!pq"n3qtC8iN#?Oe#H:_Y7`Pt-@(ael=#3.TJhs9S,lsQh;-nATiTZ::Kr8G,*F/'86kCC($QtMDrg&hArB%O5bK?rEd=Ia7pn*81J4J(C43dkNf'l%/l%4d6_38^g>#)a$kVWqkXiT=I%LU7q5h+jhhjrMq)tk$mf7p!MOkUnk*)UgH>1Cu$/*&:ihC60Ni7In#>[EL_]tSF[7&FuK]U";!<Rhd6"BP0UmOdf:MY6R%nc*?]^_,75bK4K!FMJH`>k%fg7pBfU%ko/BjUVk6BN2ukjYS$$<+,C2TbsbdAu7ZK4qt/k!b"2:8i\.#>.cA6lo<=]Loo7cH`,NLT,ZG%8D=((NC)1r"]b^SHj`"7m!">VG@UA5uA1!ZkX$unLV[B+r[kPS!3^1dY#rOLl4Sc5bL98*@bI,6j77go8s@gLID5>hXlUh+OKl8^:oo)mh!sG_+0asQ)qEl^g1JRK0XcVc`;S/',@16a%nHqL,(;0?C?TsJ3ZUmV.u5@o?PCI0--fLn)Q2)Q`Foh\Dq.:A<_o<XRi^gHG!5oe)EOFb9!b?$m0@T6o2!hl5uL-[cjY.Iu5N-S/U5U(d5WHri5oR%e!QHIMg84Z@:Qnn]aS7Xkr5*nE5<Y~> endstream endobj --- 657,661 ---- >> stream ! Gb"/l?$"^Z'Sc)P(!Q#=1HS5\9E)LJ,jf,$D,[+>(H[!&(]iKFS_>8^rr"#[j5]'NB"!]pGh\]X)FG(2o-0`HFEBEWS\DMcbifo2iOEI+-S<n-QN(+BZ^6(M1HWfp&*N>phh]QLq`!!PO1sktd5[XI&mp?4Uq9o.GO$XI#='CCkXUaaKLWdQgAeO8^TUXpRJIN9?u)0>7&IO]+Od\A>:PJBb78EZ9b.O5!pu5>AGrrL&2Bl!d[U)1,\L]/SP6n?(p$e)QIGKQ5bLK=/Z.fX`)KH?W`S^9e0`:Sf(9M=+OI8f+Xgs9T\(k/'M\dBYhVb`^[bOJglMAiSBFH;RGjn)JUp)`:PF'Tp#`ei@$g"I*Ko78Q/:]ak8ja-D:auqDeKN*XXA5b0T<cfW,2=XW,-jD&&I;iLQ1L&#k[0EehZOB!SelB93lW]De1aB>b,7O!!4/p'a!oYA'boX+QuVu`V`b"BR+QBdmF+d5W^PBN"[)&m_GkljS-5j$]/:N4U;T)e;-@,-4pOKOGnMEm8PFU%UlqC%fuk8]tS10#8o+S&^dh=BOotXSo2Gk!<O8T'q4+47Ofsu9M2,XOOE$#0r*b\s#I\H+:ngcDtKh6j\$EE,;N6?NL#FDF.m0uH#^#uUsl2_DMIX!*ukQn?W<Df=)X+b9?`NQ3NeQj*6t@g4,Y=F!<bG->,d7iOZeiq-%o3HW-cn;E[XZW*^CiEUY>Bon!)Qp]..I,8#&oDA,>86AlkrW]NM1\*G"0N2[K%sm*`7s>ul+mJ+Nr[0Ve!ubHD;AWiRb(MpNjXoMZ3bf,H7S`*d:MiQP*8i.UM*Q43jf"b@/7[ci=ZM(VX!^n>mkIA5%f1d1sP#dc*]k_W=*C_U3D+\>V'#)et#AY?>QC4$:0&Elri&1G/6_'<2S"KIX5&C9OHi_-9ej0=&GJRU8Td*C#S6[&rJkgW$],4:Ij4j:2?-6'?46(k!K-\Wi'dTC&nUePBqgsQnqa-i)^jK%d1j@"IdkISVMcC]_SYAVh^Q(WdY1FX>RdoY^<mI\?q(*F0e&]Lb7MBTJs'W^N.GZ:7emuGF7X!q26S;54,fb,[D/<2EG,R)nKg1!+?9h^=g!a]V&EAS%JdLP:4D&gYg'pm50':J9kHn1k<V_.M/=_(jfS=[KY:kd;M9_@nc*k<@a`D=_Lb"mZqcPWU[WUJ><";QY6;nl3JHo.kII%TW6?fZulLC"YV_7Z$;;`XT[2;%EYJ:?jDc9)`p.hf0m17qW^=;G]Mo7K<$A"l;plAOV@f-H6M4VHF8Vf09A"iKXBfW8R_?L[L]i^9nrIb?rN.QC.6E[R(C1_&M_8!ht;^R)@u?JK"NrqLAY=eOB;Pk>9F\AQC`1r!NuOr%(FAUa#6kC,UADDiEiUVFAZh\,/JW3D5?9`KKkBp\WL?M8XCb&^qcniiH;d6qo&oSM=n)%d,WC/R\mrNE<lLmC.>N"W'Y"9RsGD)$2$&lY^EZOK]GM37^*)Y#6!J.l$eJ3Z?LL?gWt\Ol3d22DS)[Ju5YAhcRPqZMI802nD;S!uFEWT)8F_KDBK8KnD3E,-[(Zq%LBj:.$94P_I!J&n`t363u]JI[nOIAef*DL-p"6fh@4`"0.P\AGYB*Wu`Og)8:W3>E!lk]qXN^21Gf?%*n9,V+L4HU]LtE&U)pRJYESb$6Sh>mV<g5Lef03J/+K"9Q9*;JfAtba0h<UImt_C*9;!9!22Xha01P>;t(fb_,XWEr<j_W2Y`?5/3A\<PWM[HLW!"]Pi*c'iXbqnrh5DcY7QPq5X+*&S>HuM]mWV"9Rs2'fu+L?K(-:#EtK'N7Wn+qa$ODKR+IX&EqJsk>g.&K3Bi`h:eUjQ][HQ8f8#?X%\-k]N)"*T"0AXJj;goX&YFoE@<g@eM<;&8u1NoEAOBhNU&e]:P`pW+9,WTKo,(5+OEF%PCeq/9F[.6>4IuoPEAPElWoVg!WjAW4YI_t,Is]%MN6L+Z@*V2H*o`(C]T(sT!jH09+k&Oq56[BbD%eT"9O",`mg?I@LgL]Xe`!]Wk`D,`^^(3Jc;h_e5sn&2G%'=d$RF4IU1#O.i?T0)[?L,Hn)Lt5&$6a,\aVQDj\0-UWLBFjG><FfE)*p-p=O@=\tB?11uq748X%2VX!^=2;NtT`_!,7b<'\&*X(1[g9MtX4_!mdMLn*d[:n&sGgDaM7&*YZ1T9/%h&H"X\0r$o"PPZcU&p':<.IFu2cQI-cg-%;VFLajJR2g_od0AqS!ZAK53bh?AA15imNB[k"PR(+?3OSlVuR8iITGDY<+0)]b="Gn"?I_V<26D!G;3o^D&M_4.uP!!6JmMFCj4"@OqQFh[m%4FL21od\`d/`o"ic!nF9OK1ul.q)R=*1(EI)I:RS#Z;kpB7UZ6L@?Y_lc/NWg_&&Sjjm'h40X?Od4q*+fZ!`k*l~> endstream [...34556 lines suppressed...] ! 0000735169 00000 n ! 0000735441 00000 n ! 0000735639 00000 n ! 0000735754 00000 n ! 0000735866 00000 n ! 0000735983 00000 n ! 0000736093 00000 n ! 0000736206 00000 n ! 0000736328 00000 n ! 0000736442 00000 n ! 0000736550 00000 n trailer << ! /Size 2474 /Root 2 0 R /Info 4 0 R >> startxref ! 785955 %%EOF |
|
From: <ope...@li...> - 2005-12-19 20:44:54
|
Update of /cvsroot/openca/openca-0.9/contrib In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv13386/contrib Modified Files: Tag: openca_0_9_2 access-control-with-ldap.xml Log Message: Small doc/contrib changes. --- madwolf Author of changes: madwolf Index: access-control-with-ldap.xml =================================================================== RCS file: /cvsroot/openca/openca-0.9/contrib/Attic/access-control-with-ldap.xml,v retrieving revision 1.1.2.1 retrieving revision 1.1.2.2 diff -C2 -d -r1.1.2.1 -r1.1.2.2 *** access-control-with-ldap.xml 15 Dec 2005 13:55:32 -0000 1.1.2.1 --- access-control-with-ldap.xml 19 Dec 2005 20:44:17 -0000 1.1.2.2 *************** *** 18,25 **** <ldapdata> <!-- first you have to specify the LDAP server used: --> ! <host>okroot1.ELK-WUE.DE</host> <port>3269</port> ! <base>dc=OKR,dc=ELK-WUE,dc=de</base> ! <binddn>cn=daasi,cn=users,dc=OKR,dc=ELK-WUE,dc=de</binddn> <bindpw>X509v3smime</bindpw> <!-- should the communication to the ldap server be encrypted --- 18,25 ---- <ldapdata> <!-- first you have to specify the LDAP server used: --> ! <host>openca.org</host> <port>3269</port> ! <base>dc=openca,dc=org</base> ! <binddn>cn=myname,cn=users,dc=openca,dc=org</binddn> <bindpw>X509v3smime</bindpw> <!-- should the communication to the ldap server be encrypted *************** *** 84,92 **** in stead of "Login to OpenCA". You can specify the new string here: --> ! <loginheadline>Login Zertifizierungsstelle Evangelische Landeskirche Wuerttemberg</loginheadline> <!-- you might also want to have a different text for prompting the login name of the user in stead of "login", indicating what type of ID info is requested: --> ! <loginprompt>SMTP Email-Adresse</loginprompt> <passwd> <!-- The LDAP Login module also provides for role mapping, --- 84,92 ---- in stead of "Login to OpenCA". You can specify the new string here: --> ! <loginheadline>Login to OpenCA PKI Service</loginheadline> <!-- you might also want to have a different text for prompting the login name of the user in stead of "login", indicating what type of ID info is requested: --> ! <loginprompt>SMTP Email-Adress</loginprompt> <passwd> <!-- The LDAP Login module also provides for role mapping, *************** *** 99,107 **** above authmethmapping: --> <rolemapping> ! <roleattributevalue>CN=OpenCA_RA,OU=UserGroups_universal,DC=OKR,DC=ELK-WUE,DC=DE</roleattributevalue> <role>RA Operator</role> </rolemapping> <rolemapping> ! <roleattributevalue>CN=OpenCA_User,OU=UserGroups_universal,DC=OKR,DC=ELK-WUE,DC=DE</roleattributevalue> <role>User</role> </rolemapping> --- 99,107 ---- above authmethmapping: --> <rolemapping> ! <roleattributevalue>CN=OpenCA_RA,OU=UserGroups_universal,DC=openca,DC=org</roleattributevalue> <role>RA Operator</role> </rolemapping> <rolemapping> ! <roleattributevalue>CN=OpenCA_User,OU=UserGroups_universal,DC=openca,DC=org</roleattributevalue> <role>User</role> </rolemapping> |
Update of /cvsroot/openca/openca-0.9/docs/guide/html_chunked In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv13386/docs/guide/html_chunked Modified Files: Tag: openca_0_9_2 apa.html apas02.html apas03.html apas04.html apas05.html apas06.html apb.html apc.html apcs02.html apcs03.html apcs04.html apcs05.html apd.html apds02.html apds03.html apds04.html apds05.html apds06.html apds07.html ape.html apes02.html apes03.html apes04.html apes05.html apes06.html apes07.html apes08.html apf.html bi01.html ch01.html ch01s02.html ch01s03.html ch01s04.html ch01s05.html ch01s06.html ch01s07.html ch02.html ch02s02.html ch02s03.html ch02s04.html ch02s05.html ch03.html ch03s02.html ch03s03.html ch03s04.html ch04.html ch04s02.html ch04s03.html ch04s04.html ch04s05.html ch04s06.html ch04s07.html ch04s08.html ch04s09.html ch04s10.html ch04s11.html ch05.html ch05s02.html ch05s03.html ch05s04.html ch06.html ch06s02.html ch06s03.html ch06s04.html ch06s05.html ch07.html ch07s02.html ch07s03.html ch08.html ch10.html ch11.html ch13.html ch15.html ch15s02.html ch16.html ch16s02.html ch16s03.html ch16s04.html ch16s05.html ch16s06.html ch16s07.html ch17.html ch17s02.html ch17s03.html ch17s04.html ch18.html ch18s02.html ch18s03.html ch18s04.html ch18s05.html ch18s06.html ch18s07.html go01.html index.html pr01.html pr02.html pr03.html pr04.html pr05.html pt01.html pt02.html pt03.html pt04.html Log Message: Small doc/contrib changes. --- madwolf Author of changes: madwolf Index: apa.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apa.html,v retrieving revision 1.40.2.3 retrieving revision 1.40.2.4 diff -C2 -d -r1.40.2.3 -r1.40.2.4 *** apa.html 5 Aug 2005 16:11:49 -0000 1.40.2.3 --- apa.html 19 Dec 2005 20:44:35 -0000 1.40.2.4 *************** *** 1,7 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix A. History</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="ch18s07.html" title="7. Dataexchange and Node management"><link rel="next" href="apas02.html" title="2. PKI and eGovernment"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix A. History</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ch18s07.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apas02.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2486357"></a>Appendix A. History</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apa.html#id2486372">1. PKI Scenario before OpenCA</a></span></dt><dt><span class="sect1"><a href="apas02.html">2. PKI and eGovernment</a></span></dt><dt><span class="sect1"><a href="apas03.html">3. Internet Standards</a></span></dt><dt><span class="sect1"><a href="apas04.html">4. The Project's Purposes</a></span></dt><dt><span class="sect1"><a href="apas05.html">5. The Project's Achievements</a></span></dt><dt><span class="sect1"><a href="apas06.html">6. The OpenCA Project</a></span></dt><dd><dl><dt><span class="sect2"><a href="apas06.html#id2486686">6.1. The project start</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2486751">6.2. Offering Help to Other Projects: OpenSSL</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2486799">6.3. CVS and Mailing Lists</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2486831">6.4. The Open Source Choice</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2486862">6.5. Migrating to SourceForge</a></span></dt></dl></dd></dl></div><p> Here you can read some historical notes about OpenCA. Please don't believe they are complete or always rational. We only write such notes if we have no new ideas at the moment ;-D ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486372"></a>1. PKI Scenario before OpenCA</h2></div></div></div><p> When OpenCA was just a thought in our mind, the need for a complete PKI solution was already perceiving. The --- 1,7 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix A. History</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="ch18s07.html" title="7. Dataexchange and Node management"><link rel="next" href="apas02.html" title="2. PKI and eGovernment"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix A. History</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="ch18s07.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apas02.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2880939"></a>Appendix A. History</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apa.html#id2880954">1. PKI Scenario before OpenCA</a></span></dt><dt><span class="sect1"><a href="apas02.html">2. PKI and eGovernment</a></span></dt><dt><span class="sect1"><a href="apas03.html">3. Internet Standards</a></span></dt><dt><span class="sect1"><a href="apas04.html">4. The Project's Purposes</a></span></dt><dt><span class="sect1"><a href="apas05.html">5. The Project's Achievements</a></span></dt><dt><span class="sect1"><a href="apas06.html">6. The OpenCA Project</a></span></dt><dd><dl><dt><span class="sect2"><a href="apas06.html#id2881271">6.1. The project start</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2881323">6.2. Offering Help to Other Projects: OpenSSL</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2881371">6.3. CVS and Mailing Lists</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2881403">6.4. The Open Source Choice</a></span></dt><dt><span class="sect2"><a href="apas06.html#id2881434">6.5. Migrating to SourceForge</a></span></dt></dl></dd></dl></div><p> Here you can read some historical notes about OpenCA. Please don't believe they are complete or always rational. We only write such notes if we have no new ideas at the moment ;-D ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2880954"></a>1. PKI Scenario before OpenCA</h2></div></div></div><p> When OpenCA was just a thought in our mind, the need for a complete PKI solution was already perceiving. The Index: apas02.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apas02.html,v retrieving revision 1.39.2.3 retrieving revision 1.39.2.4 diff -C2 -d -r1.39.2.3 -r1.39.2.4 *** apas02.html 5 Aug 2005 16:11:51 -0000 1.39.2.3 --- apas02.html 19 Dec 2005 20:44:35 -0000 1.39.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. PKI and eGovernment</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apa.html" title="Appendix A. History"><link rel="next" href="apas03.html" title="3. Internet Standards"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. PKI and eGovernment</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apa.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas03.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486487"></a>2. PKI and eGovernment</h2></div></div></div><p> The use of Public Key Infrastructure (PKI) deserves special attention, as the most common challenges for --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. PKI and eGovernment</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apa.html" title="Appendix A. History"><link rel="next" href="apas03.html" title="3. Internet Standards"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. PKI and eGovernment</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apa.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas03.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881074"></a>2. PKI and eGovernment</h2></div></div></div><p> The use of Public Key Infrastructure (PKI) deserves special attention, as the most common challenges for Index: apas03.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apas03.html,v retrieving revision 1.40.2.3 retrieving revision 1.40.2.4 diff -C2 -d -r1.40.2.3 -r1.40.2.4 *** apas03.html 5 Aug 2005 16:12:00 -0000 1.40.2.3 --- apas03.html 19 Dec 2005 20:44:35 -0000 1.40.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3. Internet Standards</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas02.html" title="2. PKI and eGovernment"><link rel="next" href="apas04.html" title="4. The Project's Purposes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3. Internet Standards</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas02.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas04.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486514"></a>3. Internet Standards</h2></div></div></div><p> Our project deals mainly with informations and informations need to be interoperable to be useful. --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3. Internet Standards</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas02.html" title="2. PKI and eGovernment"><link rel="next" href="apas04.html" title="4. The Project's Purposes"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3. Internet Standards</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas02.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas04.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881101"></a>3. Internet Standards</h2></div></div></div><p> Our project deals mainly with informations and informations need to be interoperable to be useful. Index: apas04.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apas04.html,v retrieving revision 1.39.2.3 retrieving revision 1.39.2.4 diff -C2 -d -r1.39.2.3 -r1.39.2.4 *** apas04.html 5 Aug 2005 16:12:00 -0000 1.39.2.3 --- apas04.html 19 Dec 2005 20:44:35 -0000 1.39.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4. The Project's Purposes</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas03.html" title="3. Internet Standards"><link rel="next" href="apas05.html" title="5. The Project's Achievements"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4. The Project's Purposes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas03.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas05.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486537"></a>4. The Project's Purposes</h2></div></div></div><p> The OpenCA project has been started when PKI's scenario was lacking either on the applications side and on the --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4. The Project's Purposes</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas03.html" title="3. Internet Standards"><link rel="next" href="apas05.html" title="5. The Project's Achievements"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4. The Project's Purposes</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas03.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas05.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881123"></a>4. The Project's Purposes</h2></div></div></div><p> The OpenCA project has been started when PKI's scenario was lacking either on the applications side and on the Index: apas05.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apas05.html,v retrieving revision 1.39.2.3 retrieving revision 1.39.2.4 diff -C2 -d -r1.39.2.3 -r1.39.2.4 *** apas05.html 5 Aug 2005 16:12:00 -0000 1.39.2.3 --- apas05.html 19 Dec 2005 20:44:35 -0000 1.39.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5. The Project's Achievements</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas04.html" title="4. The Project's Purposes"><link rel="next" href="apas06.html" title="6. The OpenCA Project"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5. The Project's Achievements</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas04.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas06.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486587"></a>5. The Project's Achievements</h2></div></div></div><p> Five years have passed since we started to work at the project. OpenCA has been constantly growing and the --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5. The Project's Achievements</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas04.html" title="4. The Project's Purposes"><link rel="next" href="apas06.html" title="6. The OpenCA Project"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5. The Project's Achievements</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas04.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apas06.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881180"></a>5. The Project's Achievements</h2></div></div></div><p> Five years have passed since we started to work at the project. OpenCA has been constantly growing and the Index: apas06.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apas06.html,v retrieving revision 1.41.2.3 retrieving revision 1.41.2.4 diff -C2 -d -r1.41.2.3 -r1.41.2.4 *** apas06.html 5 Aug 2005 16:12:00 -0000 1.41.2.3 --- apas06.html 19 Dec 2005 20:44:35 -0000 1.41.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6. The OpenCA Project</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas05.html" title="5. The Project's Achievements"><link rel="next" href="apb.html" title="Appendix B. References"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6. The OpenCA Project</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas05.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apb.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486681"></a>6. The OpenCA Project</h2></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2486686"></a>6.1. The project start</h3></div></div></div><p> We started the OpenCA project in June 1998. The very original idea was developed by Massimiliano Pala. The --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>6. The OpenCA Project</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apa.html" title="Appendix A. History"><link rel="prev" href="apas05.html" title="5. The Project's Achievements"><link rel="next" href="apb.html" title="Appendix B. References"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">6. The OpenCA Project</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas05.html">Prev</a> </td><th width="60%" align="center">Appendix A. History</th><td width="20%" align="right"> <a accesskey="n" href="apb.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881266"></a>6. The OpenCA Project</h2></div></div></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881271"></a>6.1. The project start</h3></div></div></div><p> We started the OpenCA project in June 1998. The very original idea was developed by Massimiliano Pala. The *************** *** 40,44 **** attention from the Internet community was turned on the project. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2486751"></a>6.2. Offering Help to Other Projects: OpenSSL</h3></div></div></div><p> Our project has been based on the OpenSSL cryptographic tool. The OpenSSL project was named SSLeay and has been --- 40,44 ---- attention from the Internet community was turned on the project. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881323"></a>6.2. Offering Help to Other Projects: OpenSSL</h3></div></div></div><p> Our project has been based on the OpenSSL cryptographic tool. The OpenSSL project was named SSLeay and has been *************** *** 76,80 **** different aspects of PKIs and in particular on the Project features and structure. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2486799"></a>6.3. CVS and Mailing Lists</h3></div></div></div><div class="sidebar"> "CVS is a version control system, which allows you to keep old versions of files (usually source code), keep --- 76,80 ---- different aspects of PKIs and in particular on the Project features and structure. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881371"></a>6.3. CVS and Mailing Lists</h3></div></div></div><div class="sidebar"> "CVS is a version control system, which allows you to keep old versions of files (usually source code), keep *************** *** 97,101 **** and contributors from all around the world with little administration efforts. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2486831"></a>6.4. The Open Source Choice</h3></div></div></div><p> Security is not obscurity. This is a principle we should all keep in mind when approaching the security --- 97,101 ---- and contributors from all around the world with little administration efforts. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881403"></a>6.4. The Open Source Choice</h3></div></div></div><p> Security is not obscurity. This is a principle we should all keep in mind when approaching the security *************** *** 117,121 **** given a very big help in growing either in its practical implementation and in its visibility. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2486862"></a>6.5. Migrating to SourceForge</h3></div></div></div><p> We found ourselves at the end of the 2000 with the need to have more administration power, to coordinate different --- 117,121 ---- given a very big help in growing either in its practical implementation and in its visibility. ! </p></div><div class="sect2" lang="en"><div class="titlepage"><div><div><h3 class="title"><a name="id2881434"></a>6.5. Migrating to SourceForge</h3></div></div></div><p> We found ourselves at the end of the 2000 with the need to have more administration power, to coordinate different Index: apb.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apb.html,v retrieving revision 1.41.2.3 retrieving revision 1.41.2.4 diff -C2 -d -r1.41.2.3 -r1.41.2.4 *** apb.html 5 Aug 2005 16:12:01 -0000 1.41.2.3 --- apb.html 19 Dec 2005 20:44:35 -0000 1.41.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix B. References</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="apas06.html" title="6. The OpenCA Project"><link rel="next" href="apc.html" title="Appendix C. Internationalization - i18n"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix B. References</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas06.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apc.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2486891"></a>Appendix B. References</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apb.html#id2486910">1. Universities</a></span></dt></dl></div><p> Many people ask who uses OpenCA. The problem is that we are a non-profit organization and so we have real problems to get references of existing --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix B. References</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="apas06.html" title="6. The OpenCA Project"><link rel="next" href="apc.html" title="Appendix C. Internationalization - i18n"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix B. References</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apas06.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apc.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2881463"></a>Appendix B. References</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apb.html#id2881483">1. Universities</a></span></dt></dl></div><p> Many people ask who uses OpenCA. The problem is that we are a non-profit organization and so we have real problems to get references of existing *************** *** 7,11 **** is sometimes more important than any other fact. We can add a small description too. ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2486910"></a>1. Universities</h2></div></div></div><div class="variablelist"><dl><dt><span class="term"> <a href="http://www.au-kbc.org" target="_top">AU - KBC Research Centre</a> </span></dt><dd><p> --- 7,11 ---- is sometimes more important than any other fact. We can add a small description too. ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881483"></a>1. Universities</h2></div></div></div><div class="variablelist"><dl><dt><span class="term"> <a href="http://www.au-kbc.org" target="_top">AU - KBC Research Centre</a> </span></dt><dd><p> Index: apc.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apc.html,v retrieving revision 1.44.2.3 retrieving revision 1.44.2.4 diff -C2 -d -r1.44.2.3 -r1.44.2.4 *** apc.html 5 Aug 2005 16:12:01 -0000 1.44.2.3 --- apc.html 19 Dec 2005 20:44:35 -0000 1.44.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix C. Internationalization - i18n</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="apb.html" title="Appendix B. References"><link rel="next" href="apcs02.html" title="2. it_IT"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix C. Internationalization - i18n</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apb.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apcs02.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2487057"></a>Appendix C. Internationalization - i18n</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apc.html#id2487079">1. de_DE</a></span></dt><dt><span class="sect1"><a href="apcs02.html">2. it_IT</a></span></dt><dt><span class="sect1"><a href="apcs03.html">3. ja_JP</a></span></dt><dt><span class="sect1"><a href="apcs04.html">4. pl_PL</a></span></dt><dt><span class="sect1"><a href="apcs05.html">5. sl_SI</a></span></dt></dl></div><p> OpenCA supports internationalization (i18n) since version 0.9.1. Full i18n support is available with version 0.9.2. There are --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix C. Internationalization - i18n</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="apb.html" title="Appendix B. References"><link rel="next" href="apcs02.html" title="2. it_IT"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix C. Internationalization - i18n</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apb.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apcs02.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2881623"></a>Appendix C. Internationalization - i18n</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apc.html#id2881645">1. de_DE</a></span></dt><dt><span class="sect1"><a href="apcs02.html">2. it_IT</a></span></dt><dt><span class="sect1"><a href="apcs03.html">3. ja_JP</a></span></dt><dt><span class="sect1"><a href="apcs04.html">4. pl_PL</a></span></dt><dt><span class="sect1"><a href="apcs05.html">5. sl_SI</a></span></dt></dl></div><p> OpenCA supports internationalization (i18n) since version 0.9.1. Full i18n support is available with version 0.9.2. There are *************** *** 10,14 **** to create a new translation feel free to contact us on one of our mailing lists. ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487079"></a>1. de_DE</h2></div></div></div><p>The German translation is managed by Michael Bell from Humboldt-University of Berlin but there are more than one German OpenCA developer. So the easiest way --- 10,14 ---- to create a new translation feel free to contact us on one of our mailing lists. ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881645"></a>1. de_DE</h2></div></div></div><p>The German translation is managed by Michael Bell from Humboldt-University of Berlin but there are more than one German OpenCA developer. So the easiest way Index: apcs02.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apcs02.html,v retrieving revision 1.42.2.3 retrieving revision 1.42.2.4 diff -C2 -d -r1.42.2.3 -r1.42.2.4 *** apcs02.html 5 Aug 2005 16:12:01 -0000 1.42.2.3 --- apcs02.html 19 Dec 2005 20:44:35 -0000 1.42.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. it_IT</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="next" href="apcs03.html" title="3. ja_JP"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. it_IT</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apc.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apcs03.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487094"></a>2. it_IT</h2></div></div></div><p>Massimiliano "madwolf" Pala is the actual manager of the Italian translation. He is OpenCA's project manager and the original founder of the project. You can contact him via our --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. it_IT</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="next" href="apcs03.html" title="3. ja_JP"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. it_IT</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apc.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apcs03.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881660"></a>2. it_IT</h2></div></div></div><p>Massimiliano "madwolf" Pala is the actual manager of the Italian translation. He is OpenCA's project manager and the original founder of the project. You can contact him via our Index: apcs03.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apcs03.html,v retrieving revision 1.43.2.3 retrieving revision 1.43.2.4 diff -C2 -d -r1.43.2.3 -r1.43.2.4 *** apcs03.html 5 Aug 2005 16:12:01 -0000 1.43.2.3 --- apcs03.html 19 Dec 2005 20:44:35 -0000 1.43.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3. ja_JP</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apcs02.html" title="2. it_IT"><link rel="next" href="apcs04.html" title="4. pl_PL"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3. ja_JP</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs02.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apcs04.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487108"></a>3. ja_JP</h2></div></div></div><p>The Japanese translation was created by Takahiro Tsuji. You can conact him for any problems at <code class="email"><<a href="mailto:op...@po...">op...@po...</a>></code>. He works --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3. ja_JP</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apcs02.html" title="2. it_IT"><link rel="next" href="apcs04.html" title="4. pl_PL"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3. ja_JP</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs02.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apcs04.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881674"></a>3. ja_JP</h2></div></div></div><p>The Japanese translation was created by Takahiro Tsuji. You can conact him for any problems at <code class="email"><<a href="mailto:op...@po...">op...@po...</a>></code>. He works Index: apcs04.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apcs04.html,v retrieving revision 1.43.2.3 retrieving revision 1.43.2.4 diff -C2 -d -r1.43.2.3 -r1.43.2.4 *** apcs04.html 5 Aug 2005 16:12:02 -0000 1.43.2.3 --- apcs04.html 19 Dec 2005 20:44:35 -0000 1.43.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4. pl_PL</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apcs03.html" title="3. ja_JP"><link rel="next" href="apcs05.html" title="5. sl_SI"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4. pl_PL</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs03.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apcs05.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487127"></a>4. pl_PL</h2></div></div></div><p>Franciszek "Franz" Lewenda from the Research and Academic Computer Network (NASK) creates the Polish translation. You can reach him via our mailing lists. This was the first --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>4. pl_PL</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apcs03.html" title="3. ja_JP"><link rel="next" href="apcs05.html" title="5. sl_SI"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">4. pl_PL</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs03.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apcs05.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881693"></a>4. pl_PL</h2></div></div></div><p>Franciszek "Franz" Lewenda from the Research and Academic Computer Network (NASK) creates the Polish translation. You can reach him via our mailing lists. This was the first Index: apcs05.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apcs05.html,v retrieving revision 1.28.2.3 retrieving revision 1.28.2.4 diff -C2 -d -r1.28.2.3 -r1.28.2.4 *** apcs05.html 5 Aug 2005 16:12:02 -0000 1.28.2.3 --- apcs05.html 19 Dec 2005 20:44:35 -0000 1.28.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5. sl_SI</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apcs04.html" title="4. pl_PL"><link rel="next" href="apd.html" title="Appendix D. Authors and Contributors"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5. sl_SI</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs04.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apd.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487141"></a>5. sl_SI</h2></div></div></div><p>The Slovene translation was created and is for now managed by Janez Pirc. He works for SETCCE (Security Technology Competence Centre, <a href="http://www.setcce.org" target="_top">http://www.setcce.org</a>) which uses OpenCA to --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>5. sl_SI</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apc.html" title="Appendix C. Internationalization - i18n"><link rel="prev" href="apcs04.html" title="4. pl_PL"><link rel="next" href="apd.html" title="Appendix D. Authors and Contributors"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">5. sl_SI</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs04.html">Prev</a> </td><th width="60%" align="center">Appendix C. Internationalization - i18n</th><td width="20%" align="right"> <a accesskey="n" href="apd.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881707"></a>5. sl_SI</h2></div></div></div><p>The Slovene translation was created and is for now managed by Janez Pirc. He works for SETCCE (Security Technology Competence Centre, <a href="http://www.setcce.org" target="_top">http://www.setcce.org</a>) which uses OpenCA to Index: apd.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apd.html,v retrieving revision 1.25.2.3 retrieving revision 1.25.2.4 diff -C2 -d -r1.25.2.3 -r1.25.2.4 *** apd.html 5 Aug 2005 16:12:02 -0000 1.25.2.3 --- apd.html 19 Dec 2005 20:44:35 -0000 1.25.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix D. Authors and Contributors</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="apcs05.html" title="5. sl_SI"><link rel="next" href="apds02.html" title="2. Michael Bell"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix D. Authors and Contributors</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs05.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apds02.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2487168"></a>Appendix D. Authors and Contributors</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apd.html#id2487182">1. Martin Bartosch</a></span></dt><dt><span class="sect1"><a href="apds02.html">2. Michael Bell</a></span></dt><dt><span class="sect1"><a href="apds03.html">3. Chris Covell</a></span></dt><dt><span class="sect1"><a href="apds04.html">4. Massimiliano Pala</a></span></dt><dt><span class="sect1"><a href="apds05.html">5. Ulrich Bathels</a></span></dt><dt><span class="sect1"><a href="apds06.html">6. Ashutosh Jaiswal</a></span></dt><dt><span class="sect1"><a href="apds07.html">7. FAQ</a></span></dt></dl></div><p> Here you can find all the authors and contributors to this guide. ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487182"></a>1. Martin Bartosch</h2></div></div></div><p>nCipher documentation.</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apcs05.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="apds02.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">5. sl_SI </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 2. Michael Bell</td></tr></table></div></body></html> --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>Appendix D. Authors and Contributors</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="prev" href="apcs05.html" title="5. sl_SI"><link rel="next" href="apds02.html" title="2. Michael Bell"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">Appendix D. Authors and Contributors</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apcs05.html">Prev</a> </td><th width="60%" align="center"> </th><td width="20%" align="right"> <a accesskey="n" href="apds02.html">Next</a></td></tr></table><hr></div><div class="appendix" lang="en"><div class="titlepage"><div><div><h2 class="title"><a name="id2881735"></a>Appendix D. Authors and Contributors</h2></div></div></div><div class="toc"><p><b>Table of Contents</b></p><dl><dt><span class="sect1"><a href="apd.html#id2881748">1. Martin Bartosch</a></span></dt><dt><span class="sect1"><a href="apds02.html">2. Michael Bell</a></span></dt><dt><span class="sect1"><a href="apds03.html">3. Chris Covell</a></span></dt><dt><span class="sect1"><a href="apds04.html">4. Massimiliano Pala</a></span></dt><dt><span class="sect1"><a href="apds05.html">5. Ulrich Bathels</a></span></dt><dt><span class="sect1"><a href="apds06.html">6. Ashutosh Jaiswal</a></span></dt><dt><span class="sect1"><a href="apds07.html">7. FAQ</a></span></dt></dl></div><p> Here you can find all the authors and contributors to this guide. ! </p><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881748"></a>1. Martin Bartosch</h2></div></div></div><p>nCipher documentation.</p></div></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apcs05.html">Prev</a> </td><td width="20%" align="center"> </td><td width="40%" align="right"> <a accesskey="n" href="apds02.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">5. sl_SI </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 2. Michael Bell</td></tr></table></div></body></html> Index: apds02.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apds02.html,v retrieving revision 1.25.2.3 retrieving revision 1.25.2.4 diff -C2 -d -r1.25.2.3 -r1.25.2.4 *** apds02.html 5 Aug 2005 16:12:02 -0000 1.25.2.3 --- apds02.html 19 Dec 2005 20:44:35 -0000 1.25.2.4 *************** *** 1,3 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. Michael Bell</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apd.html" title="Appendix D. Authors and Contributors"><link rel="prev" href="apd.html" title="Appendix D. Authors and Contributors"><link rel="next" href="apds03.html" title="3. Chris Covell"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. Michael Bell</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apd.html">Prev</a> </td><th width="60%" align="center">Appendix D. Authors and Contributors</th><td width="20%" align="right"> <a accesskey="n" href="apds03.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487195"></a>2. Michael Bell</h2></div></div></div><p>Configuration issues, batch system, LDAP, FAQ maintenance and all content which is not explicitly written by others :) </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apd.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="apd.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="apds03.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Appendix D. Authors and Contributors </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 3. Chris Covell</td></tr></table></div></body></html> --- 1,3 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>2. Michael Bell</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apd.html" title="Appendix D. Authors and Contributors"><link rel="prev" href="apd.html" title="Appendix D. Authors and Contributors"><link rel="next" href="apds03.html" title="3. Chris Covell"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">2. Michael Bell</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apd.html">Prev</a> </td><th width="60%" align="center">Appendix D. Authors and Contributors</th><td width="20%" align="right"> <a accesskey="n" href="apds03.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881761"></a>2. Michael Bell</h2></div></div></div><p>Configuration issues, batch system, LDAP, FAQ maintenance and all content which is not explicitly written by others :) </p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apd.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="apd.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="apds03.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">Appendix D. Authors and Contributors </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 3. Chris Covell</td></tr></table></div></body></html> Index: apds03.html =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/html_chunked/Attic/apds03.html,v retrieving revision 1.25.2.3 retrieving revision 1.25.2.4 diff -C2 -d -r1.25.2.3 -r1.25.2.4 *** apds03.html 5 Aug 2005 16:12:02 -0000 1.25.2.3 --- apds03.html 19 Dec 2005 20:44:35 -0000 1.25.2.4 *************** *** 1 **** ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3. Chris Covell</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apd.html" title="Appendix D. Authors and Contributors"><link rel="prev" href="apds02.html" title="2. Michael Bell"><link rel="next" href="apds04.html" title="4. Massimiliano Pala"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3. Chris Covell</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apds02.html">Prev</a> </td><th width="60%" align="center">Appendix D. Authors and Contributors</th><td width="20%" align="right"> <a accesskey="n" href="apds04.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2487211"></a>3. Chris Covell</h2></div></div></div><p>LDAP stuff and Web interface documentation.</p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apds02.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="apd.html">Up</a></td><td width="40%" align="right"> <a accesskey="n" href="apds04.html">Next</a></td></tr><tr><td width="40%" align="left" valign="top">2. Michael Bell </td><td width="20%" align="center"><a accesskey="h" href="index.html">Home</a></td><td width="40%" align="right" valign="top"> 4. Massimiliano Pala</td></tr></table></div></body></html> --- 1 ---- ! <html><head><meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"><title>3. Chris Covell</title><link rel="stylesheet" href="default.css" type="text/css"><meta name="generator" content="DocBook XSL Stylesheets V1.68.1"><link rel="start" href="index.html" title="OpenCA Guide for Versions 0.9.2+"><link rel="up" href="apd.html" title="Appendix D. Authors and Contributors"><link rel="prev" href="apds02.html" title="2. Michael Bell"><link rel="next" href="apds04.html" title="4. Massimiliano Pala"></head><body bgcolor="white" text="black" link="#0000FF" vlink="#840084" alink="#0000FF"><div class="navheader"><table width="100%" summary="Navigation header"><tr><th colspan="3" align="center">3. Chris Covell</th></tr><tr><td width="20%" align="left"><a accesskey="p" href="apds02.html">Prev</a> </td><th width="60%" align="center">Appendix D. Authors and Contributors</th><td width="20%" align="right"> <a accesskey="n" href="apds04.html">Next</a></td></tr></table><hr></div><div class="sect1" lang="en"><div class="titlepage"><div><div><h2 class="title" style="clear: both"><a name="id2881777"></a>3. Chris Covell</h2></div></div></div><p>LDAP stuff and Web interface documentation.</p></div><div class="navfooter"><hr><table width="100%" summary="Navigation footer"><tr><td width="40%" align="left"><a accesskey="p" href="apds02.html">Prev</a> </td><td width="20%" align="center"><a accesskey="u" href="apd.html">Up</a>... [truncated message content] |
|
From: <ope...@li...> - 2005-12-19 20:06:07
|
Update of /cvsroot/openca/openca-0.9/docs/guide/admin In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv4941 Modified Files: Tag: openca_0_9_2 ac.xml Log Message: Fixed private info disclosure. --- madwolf Author of changes: madwolf Index: ac.xml =================================================================== RCS file: /cvsroot/openca/openca-0.9/docs/guide/admin/Attic/ac.xml,v retrieving revision 1.14.2.1 retrieving revision 1.14.2.2 diff -C2 -d -r1.14.2.1 -r1.14.2.2 *** ac.xml 15 Dec 2005 13:55:32 -0000 1.14.2.1 --- ac.xml 19 Dec 2005 20:05:54 -0000 1.14.2.2 *************** *** 143,148 **** <para> This method can be used to login via login and passphrase. ! OpenCA supports authentication based on an internal database ! and based on calling an external program to perform the actual user authentication. <figure> --- 143,150 ---- <para> This method can be used to login via login and passphrase. ! OpenCA supports authentication based on 1.) an internal ! database, 2.) ! ldap authentication ! and 3.) based on calling an external program to perform the actual user authentication. <figure> *************** *** 165,168 **** --- 167,189 ---- </figure> </para> + <para> + It is possible to customize the headline (default: + "Login to OpenCA") and the prompt for the login id + (default: "Login"). This can be done with the following two + configuration parameters: + <example> + <title>Login screen configuration</title> + <programlisting> + <login> + <loginheadline>This is my customized login screen</loginheadline> + <loginprompt>my login prompt</loginprompt> + ... + <login> </programlisting> + </example> + This feature is especially usefull if used with the LDAP + authentication (see below), where you can use any attribute, + such as email address as login name. + </para> + <sect4> <title>internal database</title> *************** *** 202,205 **** --- 223,379 ---- </para> </sect4> + <sect4> + <title>LDAP authentication</title> + <para> + If you have an LDAP server with login data about your users + it makes sense to use it for user authentication in OpenCA. + You have to configure the LDAP data for access, being hostname + and port of the LDAP server, its base DN (the name space of + the server), a bind dn of an entry for OpenCA to authenticate + itself, which has to have appropriate access rights configured + in the LDAP server, and the respective password, and whether + OpenCa shall use TLS encryption in its communication to the + LDAP server and the location of the respective CA certificate. + Since the configuration file contains a password, it should + only be readable for the OpenCA process. + </para> + <example> + <title>LDAP Login configuration: LDAP data</title> + <programlisting> + <login> + <type>passwd</type> + <database>ldap</database> + <ldapdata> + <host>ldap.foo.com</host> + <port>389</port> + <base>dc=foo,dc=com</base> + <binddn>cn=openca,ou=services,dc=foo,dc=com</host> + <bindpw>secret</bindpw> + <usetls>yes</usetls> + <cacertpath>/opt/certs/</cacertpath> + ... + </ldapdata> + </login> </programlisting> + </example> + + <para> + Next you have to configure, which LDAP attribute contains + the identifier or login name of the users, which could be the + uid or even an email address. Some such attributes may + contain additional constant strings prefixed to the actual + value (e.g. the attribute proxyAddresses when used for + emasil addresses can contain the prefix "SMTP": + "SMTP:mi...@fo...r". If this is so you can specify + the prefix, so OpenCA finds the user even if she does not + include the prefix in the login name. + </para> + <example> + <title>LDAP login configuration: search attribute </title> + <programlisting> + <login> + <type>passwd</type> + <database>ldap</database> + <ldapdata> + ... + <searchattr>uid</searchattr> + <searchvalueprefix></searchvalueprefix> + ... + </ldapdata> + </login> </programlisting> + </example> + <para> + The LDAP authentication module supports two different + authentication methods:</para> + <orderedlist> + <listitem><para>bind (the generic simple LDAP authentication + mechanism using the password stored in attribute userPassword) + </para></listitem> + <listitem><para>pwattr (using the password stored in a freely + configurable attribute, see below)</para></listitem> + </orderedlist> + <para>You can use both methods in parallel, but then the + module must know which method to use for which entries. + This can be defined by values of a certain attribute, + which can be defined in the configuration as + ldapauthmethattr.</para> + + <para> + Then you must define which values of that attribute + should lead to which authentication method. A good example + would be to take the attribute objectClass as + ldapauthmethattr and say if the entry contains the + objectclass posixaccount to use the ldap bind method, if + it contains objectClass externalUser to use pwattr. + such mappings can be done with the constructs + <ldapauthmethmapping> (see example below). + </para> + <para> + If none of the conditions configured here are fulfilled + by an entry, a default mechanism has to be used, which + has to be configured (see example below). + </para> + + <para> + For the pwattr method you need to specify which + attribute contains the passwords to use. + The values in that attribute can and should be stored as + hash values. If so, the module needs to know which + hashing algorithm was used. + supported are: sha1, md5, crypt and none (=clear text). + </para> + <example> + <title>LDAP login configuration: authentication mechanisms</title> + <programlisting> + <login> + <type>passwd</type> + <database>ldap</database> + <ldapdata> + ... + <ldapauthmethattr>objectclass</authmethattr> + <ldapauthmethmapping> + <ldapauthmethattrvalue>posixaccount</ldapauthmethattrvalue> + <ldapauthmeth>bind</ldapauthmeth> + </ldapauthmethmappingt> + <ldapauthmethmapping> + <ldapauthmethattrvalue>externalUser</ldapauthmethattrvalue> + <ldapauthmeth>pwattr</ldapauthmeth> + </ldapauthmethmappingt> + <ldapdefaultauthmeth>bind</ldapdefaultauthmeth> + <ldappwattr>mypasswordattribute</ldappwattr> + <ldappwattrhash>sha1</ldappwattrhash> + </ldapdata> + </login> </programlisting> + </example> + + <para> + The LDAP Login module also provides for role mapping, + where certain values of a certain attribute map + to certain OpenCA roles. First you have to specify which LDAP + attribute contains the role mapping information. + Then you can easily define the mappings (with constructs + similiar to the above authmethmapping). This is configured + within the <passwd> element: + </para> + <example> + <title>LDAP login configuration: role mapping</title> + <programlisting> + <login> + <type>passwd</type> + <database>ldap</database> + <ldapdata> + ... + </ldapdata> + <passwd> + <roleattribute>memberOf</roleattribute> + <rolemapping> + <roleattributevalue>CN=OpenCA_RA,OU=UserGroups,dc=foo,dc=com</roleattributevalue> + <rol>RA Operator</role> + </rolemapping> + </passwd> + </login> </programlisting> + </example> + + </sect4> + <sect4> <title>external authentication</title> *************** *** 281,436 **** </para> </sect4> - <sect4> - <title>LDAP authentication</title> - <para> - LDAP authentication can be used to authenticate against - an LDAP directory. - Essentially this method is a variant of - the username/passwort authentiation. - </para> - <para> - Configuration example (source file can be found in contrib/access-control-with-ldap.xml) - <example> - <title>LDAP authentication configuration</title> - <programlisting> - - <openca> - <access_control> - <channel> - <type>mod_ssl</type> - <protocol>ssl</protocol> - <source>.*</source> - <asymmetric_cipher>.*</asymmetric_cipher> - <asymmetric_keylength>0</asymmetric_keylength> - <symmetric_cipher>.*</symmetric_cipher> - <symmetric_keylength>128</symmetric_keylength> - </channel> - <login> - <type>passwd</type> - <!-- with the following database you can use LDAP for - Login to OpenCA interfaces. This makes sense if - you manage your user with LDAP or Active Directory --> - <database>ldap</database> - <ldapdata> - <!-- first you have to specify the LDAP server used: --> - <host>okroot1.ELK-WUE.DE</host> - <port>3269</port> - <base>dc=OKR,dc=ELK-WUE,dc=de</base> - <binddn>cn=daasi,cn=users,dc=OKR,dc=ELK-WUE,dc=de</binddn> - <bindpw>X509v3smime</bindpw> - <!-- should the communication to the ldap server be encrypted - via TLS? If so you need to store the cacertificate - for authentiocating the LDAP server into the directory - specified here --> - <usetls>yes</usetls> - <cacertpath>/opt</cacertpath> - <!-- What is the attribute to search the name/ID for? - A good choice would be uid --> - <searchattr>proxyAddresses</searchattr> - <!-- Some LDAP/AD Attributes have some characters in front - of the actual value that should be ignored in searches, - e.g. the attribute proxyAddresses has strings determing - the protocol like "SMTP:mi...@fo...r". In this case you - would want to configure SMTP: in searchvalueprefix, so - your users will not have to care about it --> - <searchvalueprefix>SMTP:</searchvalueprefix> - <!-- there are different methods for authenticating with - LDAP. This module supports two by now. - 1.) bind (using the password stored in attribute - userPassword. - 2.) pwattr (using the password stored in a freely - configurable attribute, see below) - You can use both methods in paralel, but then the - module must know which method to use for which entries. - This can be defined by values of a certain attribute, - which can be defined in the configuration as - ldapauthmethattr: --> - <responsibleraattr>company</responsibleraattr> - <ldapauthmethattr>objectClass</ldapauthmethattr> - <!-- Then you must define which values of that attribute - should lead to which authentication method. A good example - would be to take the attribute objectClass as - ldapauthmethattr and say if the entry contains the - objectclass posixaccount to use the ldap bind method, if - it contains objectClass externalUser to use pwattr. - such mappings can be done with the following structures: --> - <ldapauthmethmapping> - <ldapauthmethattrvalue>contact</ldapauthmethattrvalue> - <ldapauthmeth>pwattr</ldapauthmeth> - </ldapauthmethmapping> - <ldapauthmethmapping> - <ldapauthmethattrvalue>organizationalPerson</ldapauthmethattrvalue> - <ldapauthmeth>bind</ldapauthmeth> - </ldapauthmethmapping> - <!-- if none of the conditions configured here are fulfiled - by an entry, a default mechanism has to be used, which - is configured here: --> - <ldapdefaultauthmeth>bind</ldapdefaultauthmeth> - <!-- For the pwattr method you need to specify which - attribute contains the passwords to use. This is - done here: --> - <ldappwattr>extensionAttribute14</ldappwattr> - <!-- The values in that attribute can and should be stored as - hash values. If so, the module needs to know which - hashing algorithm was used. - supported are: sha1, md5, crypt and none (=clear text) --> - <ldappwattrhash>sha1</ldappwattrhash> - </ldapdata> - <!-- you might want to have an self defined headline - in stead of "Login to OpenCA". You can specify the new - string here: --> - <loginheadline>Login Zertifizierungsstelle Evangelische Landeskirche Wuerttemberg</loginheadline> - <!-- you might also want to have a different text for prompting - the login name of the user in stead of "login", indicating - what type of ID info is requested: --> - <loginprompt>SMTP Email-Adresse</loginprompt> - <passwd> - <!-- The LDAP Login module also provides for role mapping, - where certain values of a certain attribute map - to certain OpenCA roles --> - <!-- first you have to specify which LDAP attribute contains - the role mapping information: --> - <roleattribute>memberOf</roleattribute> - <!-- now you can easily define the mappings (as known from the - above authmethmapping: --> - <rolemapping> - <roleattributevalue>CN=OpenCA_RA,OU=UserGroups_universal,DC=OKR,DC=ELK-WUE,DC=DE</roleattributevalue> - <role>RA Operator</role> - </rolemapping> - <rolemapping> - <roleattributevalue>CN=OpenCA_User,OU=UserGroups_universal,DC=OKR,DC=ELK-WUE,DC=DE</roleattributevalue> - <role>User</role> - </rolemapping> - - <!-- - the initial user root has the passphrase root - you can use the script openca-digest to create the passphrases - if you want to add another user simply create a second user structure - <user>...</user> - --> - <!-- <user> - <name>root</name> - <algorithm>sha1</algorithm> - <digest>upF71NxSsbgJZdkCtq+JqrOeJVQ</digest> - <role>CA Operator</role> - </user> - --> - </passwd> - </login> - <acl_config> - <acl>yes</acl> - <list>/opt/OpenCA/etc/rbac/acl.xml</list> - <command_dir>/opt/OpenCA/etc/rbac/cmds</command_dir> - <module_id>1</module_id> - <map_role>yes</map_role> - <map_operation>yes</map_operation> - </acl_config> - </access_control> - <token_config_file>/opt/OpenCA/etc/token.xml</token_config_file> - </openca> - </programlisting> - </example> - </para> - </sect4> </sect3> <sect3> --- 455,458 ---- |
Update of /cvsroot/openca/openca-0.9/src/ocspd/src In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15819/src Modified Files: config.h general.h hash-db.c http_client.c ocspd.c server.c support.c support.h Log Message: Added chroot capabilities. Need to be tested more. --- madwolf Author of changes: madwolf Index: general.h =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/general.h,v retrieving revision 1.19 retrieving revision 1.20 diff -C2 -d -r1.19 -r1.20 *** general.h 11 Nov 2005 05:46:32 -0000 1.19 --- general.h 19 Dec 2005 05:01:18 -0000 1.20 *************** *** 111,114 **** --- 111,115 ---- #define ENV_OCSPD_RESPONSE_DAYS "next_update_days" #define ENV_OCSPD_RESPONSE_MINS "next_update_mins" + #define ENV_OCSPD_CHROOT_DIR "chroot" #define ENV_OCSPD_CA_SECTION "ca" *************** *** 317,320 **** --- 318,322 ---- char *user; char *group; + char *chroot_dir; /* Digest to be used */ Index: hash-db.c =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/hash-db.c,v retrieving revision 1.8 retrieving revision 1.9 diff -C2 -d -r1.8 -r1.9 *** hash-db.c 11 Nov 2005 05:46:32 -0000 1.8 --- hash-db.c 19 Dec 2005 05:01:18 -0000 1.9 *************** *** 377,380 **** --- 377,381 ---- /* Get the object data from HTTP */ if( (buf = ocspd_http_get ( url, 0 )) == NULL ) { + syslog(LOG_ERR, "Error loading CRL from HTTP"); syslog(LOG_ERR, "Error loading CA Cert from HTTP [%s]", url->addr ); *************** *** 463,468 **** --- 464,471 ---- /* Get the object data from HTTP */ if( (buf = ocspd_http_get ( url, 0 )) == NULL ) { + syslog(LOG_ERR, "Error loading CRL from HTTP"); syslog(LOG_ERR, "Error loading CRL from HTTP [%s]", url->addr ); + return NULL; } Index: http_client.c =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/http_client.c,v retrieving revision 1.1 retrieving revision 1.2 diff -C2 -d -r1.1 -r1.2 *** http_client.c 4 Nov 2005 00:32:09 -0000 1.1 --- http_client.c 19 Dec 2005 05:01:18 -0000 1.2 *************** *** 55,63 **** unsigned long newsize = 0; /* get subject name from bio using recommended OpenSSL template */ buf = BUF_MEM_new(); for (;;) { if ((buf == NULL) || (!BUF_MEM_grow(buf, fullsize+512))) { - if( in ) BIO_free_all (in); return NULL; } --- 55,65 ---- unsigned long newsize = 0; + if( !in ) + return NULL; + /* get subject name from bio using recommended OpenSSL template */ buf = BUF_MEM_new(); for (;;) { if ((buf == NULL) || (!BUF_MEM_grow(buf, fullsize+512))) { return NULL; } *************** *** 70,83 **** /* Error Reading from buf */ BUF_MEM_free( buf ); - BIO_free_all(in); return NULL; } ! if( (max_size) && (fullsize > max_size)) { /* Max Reading size exceeded */ syslog( LOG_ERR, "HTTP Read -- Max read size exceeded " " [ %d ]", max_size ); BUF_MEM_free( buf ); - BIO_free_all(in); return NULL; } --- 72,83 ---- /* Error Reading from buf */ BUF_MEM_free( buf ); return NULL; } ! if( (max_size > 0) && (fullsize > max_size)) { /* Max Reading size exceeded */ syslog( LOG_ERR, "HTTP Read -- Max read size exceeded " " [ %d ]", max_size ); BUF_MEM_free( buf ); return NULL; } *************** *** 87,91 **** buf->data[fullsize] = '\x0'; - return buf; } --- 87,90 ---- *************** *** 106,109 **** --- 105,109 ---- if( verbose ) { syslog( LOG_INFO, "Successfully Connected to HTTP server"); + syslog( LOG_INFO, get_s, url->path ); } Index: ocspd.c =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/ocspd.c,v retrieving revision 1.16 retrieving revision 1.17 diff -C2 -d -r1.16 -r1.17 *** ocspd.c 20 Oct 2005 13:22:24 -0000 1.16 --- ocspd.c 19 Dec 2005 05:01:18 -0000 1.17 *************** *** 55,59 **** "\n", "OpenCA's OCSP Responder\n", ! "(c) 2002-2004 by Massimiliano Pala and OpenCA Group\n", " OpenCA licensed software\n", "\n", --- 55,59 ---- "\n", "OpenCA's OCSP Responder\n", ! "(c) 2002-2006 by Massimiliano Pala and OpenCA Project\n", " OpenCA licensed software\n", "\n", *************** *** 62,70 **** static char *ocspd_usage[] = { "OCSPd - OpenCA OCSP responder daemon\n", ! "(c) 2002-2004 by Massimiliano Pala and OpenCA Group\n", "\n", " USAGE: ocspd args\n", "\n", " -d - Daemon, detach from current console\n", " -p n - Start listening on port n [2560]\n", " -b addr - Binds to ip <addr> [*]\n", --- 62,71 ---- static char *ocspd_usage[] = { "OCSPd - OpenCA OCSP responder daemon\n", ! "(c) 2002-2006 by Massimiliano Pala and OpenCA Project\n", "\n", " USAGE: ocspd args\n", "\n", " -d - Daemon, detach from current console\n", + " -r dir - Directory where to jail the running process (chroot)\n", " -p n - Start listening on port n [2560]\n", " -b addr - Binds to ip <addr> [*]\n", *************** *** 130,133 **** --- 131,135 ---- char *dbms_section = NULL; char *pidfile = NULL; + char *chroot_dir = NULL; char *tmp_s = NULL; int keyform = FORMAT_PEM; *************** *** 206,209 **** --- 208,216 ---- port_s = *(++argv); } + else if (strcmp(*argv,"-r") == 0) + { + if (--argc < 1) goto bad; + chroot_dir = *(++argv); + } else if (strcmp(*argv,"-b") == 0) { *************** *** 512,515 **** --- 519,535 ---- } + /* Get the chroot dir */ + if ((chroot_dir == NULL) && + ((ocspd_conf->chroot_dir = NCONF_get_string(ocspd_conf->conf, + section, ENV_OCSPD_CHROOT_DIR)) == NULL)) { + if( verbose ) + lookup_fail(section,ENV_OCSPD_CHROOT_DIR); + + ocspd_conf->chroot_dir = NULL; + } else { + /* The command line options has the precedence */ + ocspd_conf->chroot_dir = chroot_dir; + } + /* Get the pidfile name to write main pid to */ if ((pidfile == NULL) && ((pidfile = NCONF_get_string(ocspd_conf->conf, section, *************** *** 710,714 **** // CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON); - start_server( bind_s, port_s, child_num, maxrs_num, ocspd_conf ); --- 730,733 ---- Index: server.c =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/server.c,v retrieving revision 1.18 retrieving revision 1.19 diff -C2 -d -r1.18 -r1.19 *** server.c 4 Nov 2005 21:52:35 -0000 1.18 --- server.c 19 Dec 2005 05:01:18 -0000 1.19 *************** *** 95,99 **** * max_child)) == NULL ) { syslog(LOG_ERR, "Cannot alloc child list"); ! exit( -5 ); } bzero( child_list, sizeof(pid_t) * max_child ); --- 95,99 ---- * max_child)) == NULL ) { syslog(LOG_ERR, "Cannot alloc child list"); ! exit( 200 ); } bzero( child_list, sizeof(pid_t) * max_child ); *************** *** 111,115 **** if((addr = (char *) OPENSSL_malloc (addr_len)) == NULL ) { syslog(LOG_ERR, "Cannot alloc addr"); ! exit( -5 ); } --- 111,115 ---- if((addr = (char *) OPENSSL_malloc (addr_len)) == NULL ) { syslog(LOG_ERR, "Cannot alloc addr"); ! exit( 201 ); } *************** *** 119,123 **** if( (bio_socket = init_connection( addr )) == NULL ) { syslog(LOG_ERR,"Can not setup socket, exit."); ! exit( -6 ); } --- 119,123 ---- if( (bio_socket = init_connection( addr )) == NULL ) { syslog(LOG_ERR,"Can not setup socket, exit."); ! exit( 202 ); } *************** *** 125,129 **** if( set_privileges( ocspd_conf ) < 1 ) { syslog( LOG_ERR, "Error in setting privileges, exiting!"); ! exit(-7); } --- 125,134 ---- if( set_privileges( ocspd_conf ) < 1 ) { syslog( LOG_ERR, "Error in setting privileges, exiting!"); ! exit(203); ! } ! ! if( set_chroot( ocspd_conf ) < 1 ) { ! syslog( LOG_ERR, "ERROR: can not chroot, exiting!"); ! exit(204); } *************** *** 956,959 **** --- 961,966 ---- if( (!ca) || (!ca->crl) || (!(ca->lastUpdate)) ) { + if( verbose ) + syslog(LOG_ERR, "CRL Verify error (memory alloc)"); return(CRL_ERROR_LAST_UPDATE); } *************** *** 961,968 **** --- 968,982 ---- i=X509_cmp_time(ca->lastUpdate, NULL); if (i == 0) { + if( verbose ) + syslog(LOG_ERR, "CRL Verify error (code %d)", + CRL_ERROR_LAST_UPDATE ); + return(CRL_ERROR_LAST_UPDATE); } if (i > 0) { + if( verbose ) + syslog(LOG_ERR, "CRL Verify error (code %d)", + CRL_NOT_YET_VALID); return(CRL_NOT_YET_VALID); } *************** *** 972,979 **** --- 986,999 ---- if (i == 0) { + if( verbose ) + syslog(LOG_ERR, "CRL Verify error (code %d)", + CRL_ERROR_NEXT_UPDATE ); return(CRL_ERROR_NEXT_UPDATE); } if (i < 0) { + if( verbose ) + syslog(LOG_ERR, "CRL Verify error (code %d)", + CRL_EXPIRED ); return(CRL_EXPIRED); } Index: support.c =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/support.c,v retrieving revision 1.9 retrieving revision 1.10 diff -C2 -d -r1.9 -r1.10 *** support.c 11 Nov 2005 05:46:32 -0000 1.9 --- support.c 19 Dec 2005 05:01:20 -0000 1.10 *************** *** 370,371 **** --- 370,392 ---- } + int set_chroot( OCSPD_CONFIG *conf ) { + + if( (!conf) || (!conf->chroot_dir)) + return(1); + + /* Now chroot the running process before starting the server */ + if( chdir ( conf->chroot_dir ) != 0 ) { + /* Error in changing to working directory */ + perror(NULL); + return(0); + } + + if( chroot( conf->chroot_dir ) != 0 ) { + /* Error chrooting the process */ + perror(NULL); + return(0); + } + + /* Ok, chdir and chroot! */ + return(1); + } Index: support.h =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/src/support.h,v retrieving revision 1.5 retrieving revision 1.6 diff -C2 -d -r1.5 -r1.6 *** support.h 29 Aug 2005 12:14:36 -0000 1.5 --- support.h 19 Dec 2005 05:01:20 -0000 1.6 *************** *** 24,25 **** --- 24,26 ---- const char *pass, const char *cert_descrip); int set_privileges(OCSPD_CONFIG *conf ); + int set_chroot( OCSPD_CONFIG *conf ); |
|
From: <ope...@li...> - 2005-12-19 05:01:33
|
Update of /cvsroot/openca/openca-0.9/src/ocspd In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15819 Modified Files: ChangeLog Makefile.in aclocal.m4 configure configure.in Log Message: Added chroot capabilities. Need to be tested more. --- madwolf Author of changes: madwolf Index: ChangeLog =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/ChangeLog,v retrieving revision 1.14 retrieving revision 1.15 diff -C2 -d -r1.14 -r1.15 *** ChangeLog 4 Nov 2005 21:52:35 -0000 1.14 --- ChangeLog 19 Dec 2005 05:01:16 -0000 1.15 *************** *** 1,2 **** --- 1,5 ---- + * Mon Dec 19 00:00:23 EST 2005 Massimiliano Pala <ma...@op...> + -Added chroot facility to enhance server security + * Thu Nov 3 19:33:21 EST 2005 Massimiliano Pala <ma...@op...> -Fixed compile against OpenSSL 0.9.8a Index: Makefile.in =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/Makefile.in,v retrieving revision 1.23 retrieving revision 1.24 diff -C2 -d -r1.23 -r1.24 *** Makefile.in 4 Nov 2005 00:32:09 -0000 1.23 --- Makefile.in 19 Dec 2005 05:01:16 -0000 1.24 *************** *** 135,141 **** LN_S = @LN_S@ LTLIBOBJS = @LTLIBOBJS@ - MAINT = @MAINT@ - MAINTAINER_MODE_FALSE = @MAINTAINER_MODE_FALSE@ - MAINTAINER_MODE_TRUE = @MAINTAINER_MODE_TRUE@ MAKEINFO = @MAKEINFO@ OBJEXT = @OBJEXT@ --- 135,138 ---- *************** *** 273,277 **** am--refresh: @: ! $(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ --- 270,274 ---- am--refresh: @: ! $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ *************** *** 300,306 **** $(SHELL) ./config.status --recheck ! $(top_srcdir)/configure: @MAINTAINER_MODE_TRUE@ $(am__configure_deps) cd $(srcdir) && $(AUTOCONF) ! $(ACLOCAL_M4): @MAINTAINER_MODE_TRUE@ $(am__aclocal_m4_deps) cd $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS) --- 297,303 ---- $(SHELL) ./config.status --recheck ! $(top_srcdir)/configure: $(am__configure_deps) cd $(srcdir) && $(AUTOCONF) ! $(ACLOCAL_M4): $(am__aclocal_m4_deps) cd $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS) Index: aclocal.m4 =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/aclocal.m4,v retrieving revision 1.11 retrieving revision 1.12 diff -C2 -d -r1.11 -r1.12 *** aclocal.m4 4 Nov 2005 00:32:09 -0000 1.11 --- aclocal.m4 19 Dec 2005 05:01:16 -0000 1.12 *************** *** 6708,6740 **** AC_SUBST([am__leading_dot])]) - # Add --enable-maintainer-mode option to configure. -*- Autoconf -*- - # From Jim Meyering - - # Copyright (C) 1996, 1998, 2000, 2001, 2002, 2003, 2004, 2005 - # Free Software Foundation, Inc. - # - # This file is free software; the Free Software Foundation - # gives unlimited permission to copy and/or distribute it, - # with or without modifications, as long as this notice is preserved. - - # serial 4 - - AC_DEFUN([AM_MAINTAINER_MODE], - [AC_MSG_CHECKING([whether to enable maintainer-specific portions of Makefiles]) - dnl maintainer-mode is disabled by default - AC_ARG_ENABLE(maintainer-mode, - [ --enable-maintainer-mode enable make rules and dependencies not useful - (and sometimes confusing) to the casual installer], - USE_MAINTAINER_MODE=$enableval, - USE_MAINTAINER_MODE=no) - AC_MSG_RESULT([$USE_MAINTAINER_MODE]) - AM_CONDITIONAL(MAINTAINER_MODE, [test $USE_MAINTAINER_MODE = yes]) - MAINT=$MAINTAINER_MODE_TRUE - AC_SUBST(MAINT)dnl - ] - ) - - AU_DEFUN([jm_MAINTAINER_MODE], [AM_MAINTAINER_MODE]) - # Check to see how 'make' treats includes. -*- Autoconf -*- --- 6708,6711 ---- *************** *** 7096,7123 **** ]) # _AM_PROG_TAR - - dnl Check for OCSP support libraries in installed openssl - dnl maybe a better check for the libraries should be required - dnl expecially because if we support openssl_prefix we should - dnl support it here too - - AC_DEFUN(AC_OCSPLIB, - [ AC_TRY_RUN( [ - #include <openssl/ocsp.h> - int main(void) - { - OCSP_CERTID *cid = NULL; - return(0); - }], [ AC_DEFINE(HAVE_OCSP) ], [ocsp_error=1]) - - if [[ ocsp_error = 1 ]] ; then - AC_MSG_RESULT([checking for OpenSSL OCSP support ... no]); - AC_MSG_ERROR( - [*** OCSP support] - [*** missing support for ocsp, please update OpenSSL version] - [*** to 0.9.7 (or SNAPs). More info on http://www.openssl.org] - ) - else - AC_MSG_RESULT([OpenSSL OCSP support : yes]); - fi]) - --- 7067,7068 ---- Index: configure =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/configure,v retrieving revision 1.18 retrieving revision 1.19 diff -C2 -d -r1.18 -r1.19 *** configure 4 Nov 2005 00:32:09 -0000 1.18 --- configure 19 Dec 2005 05:01:16 -0000 1.19 *************** *** 464,468 **** #endif" ! ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS build build_cpu build_vendor build_os host host_cpu host_vendor host_os target target_cpu target_vendor target_os INSTALL_PROGRAM INSTALL_SCRIPT INSTALL_DATA CYGPATH_W PACKAGE VERSION ACLOCAL AUTOCONF AUTOMAKE AUTOHEADER MAKEINFO install_sh STRIP ac_ct_STRIP INSTALL_STRIP_PROGRAM mkdir_p AWK SET_MAKE am__leading_dot AMTAR am__tar am__untar MAINTAINER_MODE_TRUE MAINTAINER_MODE_FALSE MAINT OCSPD_ARCH_LINUX_TRUE OCSPD_ARCH_LINUX_FALSE OCSPD_ARCH_BSD_TRUE OCSPD_ARCH_BSD_FALSE OCSPD_ARCH_OSX_TRUE OCSPD_ARCH_OSX_FALSE OCSPD_ARCH_SOLARIS_TRUE OCSPD_ARCH_SOLARIS_FALSE OCSPD_ARCH_HPUX_TRUE OCSPD_ARCH_HPUX_FALSE CC CFLAGS LDFLAGS CPPFLAGS ac_ct_CC EXEEXT OBJEXT DEPDIR am__include am__quote AMDEP_TRUE AMDEP_FALSE AMDEPBACKSLASH CCDEPMODE am__fastdepCC_TRUE am__fastdepCC_FALSE CPP EGREP LN_S ECHO AR ac_ct_AR RANLIB ac_ct_RANLIB CXX CXXFLAGS ac_ct_CXX CXXDEPMODE am__fastdepCXX_TRUE am__fastdepCXX_FALSE CXXCPP F77 FFLAGS ac_ct_F77 LIBTOOL LIBTOOL_DEPS ac_aux_dir POD2MAN DATE CHMOD PKGMK RPM PERL openssl_prefix OPENSSL_PREFIX_TRUE OPENSSL_PREFIX_FALSE HAS_PKGCONF PKG_CONFIG OPENSSL_CFLAGS OPENSSL_LIBS openssl_cflags openssl_libs HAVE_OPENLDAP_TRUE HAVE_OPENLDAP_FALSE openldap_prefix LDAP_LIBS OPENLDAP_PREFIX_TRUE OPENLDAP_PREFIX_FALSE openldap_cflags openldap_libs user group HAVE_ENGINE_TRUE HAVE_ENGINE_FALSE HAVE_SEMAPHORES_TRUE HAVE_SEMAPHORES_FALSE HAVE_FLOCK_TRUE HAVE_FLOCK_FALSE openca_prefix LIBOBJS LTLIBOBJS' ac_subst_files='' --- 464,468 ---- #endif" ! ac_subst_vars='SHELL PATH_SEPARATOR PACKAGE_NAME PACKAGE_TARNAME PACKAGE_VERSION PACKAGE_STRING PACKAGE_BUGREPORT exec_prefix prefix program_transform_name bindir sbindir libexecdir datadir sysconfdir sharedstatedir localstatedir libdir includedir oldincludedir infodir mandir build_alias host_alias target_alias DEFS ECHO_C ECHO_N ECHO_T LIBS build build_cpu build_vendor build_os host host_cpu host_vendor host_os target target_cpu target_vendor target_os INSTALL_PROGRAM INSTALL_SCRIPT INSTALL_DATA CYGPATH_W PACKAGE VERSION ACLOCAL AUTOCONF AUTOMAKE AUTOHEADER MAKEINFO install_sh STRIP ac_ct_STRIP INSTALL_STRIP_PROGRAM mkdir_p AWK SET_MAKE am__leading_dot AMTAR am__tar am__untar OCSPD_ARCH_LINUX_TRUE OCSPD_ARCH_LINUX_FALSE OCSPD_ARCH_BSD_TRUE OCSPD_ARCH_BSD_FALSE OCSPD_ARCH_OSX_TRUE OCSPD_ARCH_OSX_FALSE OCSPD_ARCH_SOLARIS_TRUE OCSPD_ARCH_SOLARIS_FALSE OCSPD_ARCH_HPUX_TRUE OCSPD_ARCH_HPUX_FALSE CC CFLAGS LDFLAGS CPPFLAGS ac_ct_CC EXEEXT OBJEXT DEPDIR am__include am__quote AMDEP_TRUE AMDEP_FALSE AMDEPBACKSLASH CCDEPMODE am__fastdepCC_TRUE am__fastdepCC_FALSE CPP EGREP LN_S ECHO AR ac_ct_AR RANLIB ac_ct_RANLIB CXX CXXFLAGS ac_ct_CXX CXXDEPMODE am__fastdepCXX_TRUE am__fastdepCXX_FALSE CXXCPP F77 FFLAGS ac_ct_F77 LIBTOOL LIBTOOL_DEPS ac_aux_dir POD2MAN DATE CHMOD PKGMK RPM PERL openssl_prefix OPENSSL_PREFIX_TRUE OPENSSL_PREFIX_FALSE HAS_PKGCONF PKG_CONFIG OPENSSL_CFLAGS OPENSSL_LIBS openssl_cflags openssl_libs HAVE_OPENLDAP_TRUE HAVE_OPENLDAP_FALSE openldap_prefix LDAP_LIBS OPENLDAP_PREFIX_TRUE OPENLDAP_PREFIX_FALSE openldap_cflags openldap_libs user group HAVE_ENGINE_TRUE HAVE_ENGINE_FALSE HAVE_SEMAPHORES_TRUE HAVE_SEMAPHORES_FALSE HAVE_FLOCK_TRUE HAVE_FLOCK_FALSE openca_prefix LIBOBJS LTLIBOBJS' ac_subst_files='' *************** *** 1025,1030 **** --disable-FEATURE do not include FEATURE (same as --enable-FEATURE=no) --enable-FEATURE[=ARG] include FEATURE [ARG=yes] - --enable-maintainer-mode enable make rules and dependencies not useful - (and sometimes confusing) to the casual installer --disable-dependency-tracking speeds up one-time build --enable-dependency-tracking do not reject slow dependency extractors --- 1025,1028 ---- *************** *** 2030,2061 **** - # AM_CONFIG_HEADER(config.h) #AC_DISABLE_FAST_INSTALL #AC_DISABLE_SHARED ! echo "$as_me:$LINENO: checking whether to enable maintainer-specific portions of Makefiles" >&5 ! echo $ECHO_N "checking whether to enable maintainer-specific portions of Makefiles... $ECHO_C" >&6 ! # Check whether --enable-maintainer-mode or --disable-maintainer-mode was given. ! if test "${enable_maintainer_mode+set}" = set; then ! enableval="$enable_maintainer_mode" ! USE_MAINTAINER_MODE=$enableval ! else ! USE_MAINTAINER_MODE=no ! fi; ! echo "$as_me:$LINENO: result: $USE_MAINTAINER_MODE" >&5 ! echo "${ECHO_T}$USE_MAINTAINER_MODE" >&6 ! ! ! if test $USE_MAINTAINER_MODE = yes; then ! MAINTAINER_MODE_TRUE= ! MAINTAINER_MODE_FALSE='#' ! else ! MAINTAINER_MODE_TRUE='#' ! MAINTAINER_MODE_FALSE= ! fi ! ! MAINT=$MAINTAINER_MODE_TRUE ! ! case "${build_os}" in --- 2028,2035 ---- #AC_DISABLE_FAST_INSTALL #AC_DISABLE_SHARED ! #AM_MAINTAINER_MODE case "${build_os}" in *************** *** 2122,2125 **** --- 2096,2100 ---- + if test x$arch = xlinux ; then *************** *** 5634,5638 **** *-*-irix6*) # Find out which ABI we are using. ! echo '#line 5636 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 --- 5609,5613 ---- *-*-irix6*) # Find out which ABI we are using. ! echo '#line 5611 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 *************** *** 6740,6744 **** # Provide some information about the compiler. ! echo "$as_me:6742:" \ "checking for Fortran 77 compiler version" >&5 ac_compiler=`set X $ac_compile; echo $2` --- 6715,6719 ---- # Provide some information about the compiler. ! echo "$as_me:6717:" \ "checking for Fortran 77 compiler version" >&5 ac_compiler=`set X $ac_compile; echo $2` *************** *** 7838,7846 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:7840: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:7844: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized --- 7813,7821 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:7815: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:7819: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized *************** *** 8100,8108 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:8102: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:8106: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized --- 8075,8083 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:8077: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:8081: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized *************** *** 8162,8170 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:8164: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:8168: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then --- 8137,8145 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:8139: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:8143: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then *************** *** 9547,9551 **** case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 9549 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 --- 9522,9526 ---- case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 9524 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 *************** *** 10418,10422 **** lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 10420 "configure" #include "confdefs.h" --- 10393,10397 ---- lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 10395 "configure" #include "confdefs.h" *************** *** 10516,10520 **** lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 10518 "configure" #include "confdefs.h" --- 10491,10495 ---- lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 10493 "configure" #include "confdefs.h" *************** *** 12764,12772 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:12766: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:12770: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized --- 12739,12747 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:12741: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:12745: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized *************** *** 12826,12834 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:12828: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:12832: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then --- 12801,12809 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:12803: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:12807: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then *************** *** 13341,13345 **** case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 13343 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 --- 13316,13320 ---- case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 13318 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 *************** *** 14212,14216 **** lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 14214 "configure" #include "confdefs.h" --- 14187,14191 ---- lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 14189 "configure" #include "confdefs.h" *************** *** 14310,14314 **** lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 14312 "configure" #include "confdefs.h" --- 14285,14289 ---- lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 14287 "configure" #include "confdefs.h" *************** *** 15195,15203 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:15197: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:15201: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized --- 15170,15178 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:15172: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:15176: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized *************** *** 15257,15265 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:15259: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:15263: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then --- 15232,15240 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:15234: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:15238: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then *************** *** 16622,16626 **** case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 16624 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 --- 16597,16601 ---- case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 16599 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 *************** *** 17395,17403 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:17397: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:17401: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized --- 17370,17378 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:17372: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:17376: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized *************** *** 17657,17665 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:17659: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:17663: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized --- 17632,17640 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:17634: $lt_compile\"" >&5) (eval "$lt_compile" 2>conftest.err) ac_status=$? cat conftest.err >&5 ! echo "$as_me:17638: \$? = $ac_status" >&5 if (exit $ac_status) && test -s "$ac_outfile"; then # The compiler can only warn and ignore the option if not recognized *************** *** 17719,17727 **** -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:17721: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:17725: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then --- 17694,17702 ---- -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \ -e 's:$: $lt_compiler_flag:'` ! (eval echo "\"\$as_me:17696: $lt_compile\"" >&5) (eval "$lt_compile" 2>out/conftest.err) ac_status=$? cat out/conftest.err >&5 ! echo "$as_me:17700: \$? = $ac_status" >&5 if (exit $ac_status) && test -s out/conftest2.$ac_objext then *************** *** 19104,19108 **** case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 19106 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 --- 19079,19083 ---- case "$host_cpu" in x86_64*|s390x*|powerpc64*) ! echo '#line 19081 "configure"' > conftest.$ac_ext if { (eval echo "$as_me:$LINENO: \"$ac_compile\"") >&5 (eval $ac_compile) 2>&5 *************** *** 19975,19979 **** lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 19977 "configure" #include "confdefs.h" --- 19950,19954 ---- lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 19952 "configure" #include "confdefs.h" *************** *** 20073,20077 **** lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 20075 "configure" #include "confdefs.h" --- 20048,20052 ---- lt_status=$lt_dlunknown cat > conftest.$ac_ext <<EOF ! #line 20050 "configure" #include "confdefs.h" *************** *** 21641,21649 **** openssl_cflags= ! openssl_libs="-lssl -lcrypto -ldl" if [ x${openssl_prefix} != x ]; then openssl_cflags=-I${openssl_prefix}/include ! openssl_libs="-L${openssl_prefix}/lib -L${openssl_prefix} -lssl -lcrypto -ldl" openssl_setup=yes --- 21616,21624 ---- openssl_cflags= ! openssl_libs="-lssl -lcrypto " if [ x${openssl_prefix} != x ]; then openssl_cflags=-I${openssl_prefix}/include ! openssl_libs="-L${openssl_prefix}/lib -L${openssl_prefix} -lssl -lcrypto " openssl_setup=yes *************** *** 21808,21874 **** ## End of OpenSSL build settings section ## - if test "$cross_compiling" = yes; then - { { echo "$as_me:$LINENO: error: cannot run test program while cross compiling - See \`config.log' for more details." >&5 - echo "$as_me: error: cannot run test program while cross compiling - See \`config.log' for more details." >&2;} - { (exit 1); exit 1; }; } - else - cat >conftest.$ac_ext <<_ACEOF - /* confdefs.h. */ - _ACEOF - cat confdefs.h >>conftest.$ac_ext - cat >>conftest.$ac_ext <<_ACEOF - /* end confdefs.h. */ - - #include <openssl/ocsp.h> - int main(void) - { - OCSP_CERTID *cid = NULL; - return(0); - } - _ACEOF - rm -f conftest$ac_exeext - if { (eval echo "$as_me:$LINENO: \"$ac_link\"") >&5 - (eval $ac_link) 2>&5 - ac_status=$? - echo "$as_me:$LINENO: \$? = $ac_status" >&5 - (exit $ac_status); } && { ac_try='./conftest$ac_exeext' - { (eval echo "$as_me:$LINENO: \"$ac_try\"") >&5 - (eval $ac_try) 2>&5 - ac_status=$? - echo "$as_me:$LINENO: \$? = $ac_status" >&5 - (exit $ac_status); }; }; then - cat >>confdefs.h <<\_ACEOF - #define HAVE_OCSP 1 - _ACEOF - else - echo "$as_me: program exited with status $ac_status" >&5 - echo "$as_me: failed program was:" >&5 - sed 's/^/| /' conftest.$ac_ext >&5 - ( exit $ac_status ) - ocsp_error=1 - fi - rm -f core *.core gmon.out bb.out conftest$ac_exeext conftest.$ac_objext conftest.$ac_ext - fi - if [ ocsp_error = 1 ] ; then - echo "$as_me:$LINENO: result: checking for OpenSSL OCSP support ... no" >&5 - echo "${ECHO_T}checking for OpenSSL OCSP support ... no" >&6; - { { echo "$as_me:$LINENO: error: *** OCSP support - *** missing support for ocsp, please update OpenSSL version - *** to 0.9.7 (or SNAPs). More info on http://www.openssl.org - " >&5 - echo "$as_me: error: *** OCSP support - *** missing support for ocsp, please update OpenSSL version - *** to 0.9.7 (or SNAPs). More info on http://www.openssl.org - " >&2;} - { (exit 1); exit 1; }; } - else - echo "$as_me:$LINENO: result: OpenSSL OCSP support : yes" >&5 - echo "${ECHO_T}OpenSSL OCSP support : yes" >&6; - fi # Check whether --enable-openldap or --disable-openldap was given. --- 21783,21789 ---- *************** *** 22378,22388 **** - if test -z "${MAINTAINER_MODE_TRUE}" && test -z "${MAINTAINER_MODE_FALSE}"; then - { { echo "$as_me:$LINENO: error: conditional \"MAINTAINER_MODE\" was never defined. - Usually this means the macro was only invoked conditionally." >&5 - echo "$as_me: error: conditional \"MAINTAINER_MODE\" was never defined. - Usually this means the macro was only invoked conditionally." >&2;} - { (exit 1); exit 1; }; } - fi if test -z "${OCSPD_ARCH_LINUX_TRUE}" && test -z "${OCSPD_ARCH_LINUX_FALSE}"; then { { echo "$as_me:$LINENO: error: conditional \"OCSPD_ARCH_LINUX\" was never defined. --- 22293,22296 ---- *************** *** 23061,23067 **** s,@am__tar@,$am__tar,;t t s,@am__untar@,$am__untar,;t t - s,@MAINTAINER_MODE_TRUE@,$MAINTAINER_MODE_TRUE,;t t - s,@MAINTAINER_MODE_FALSE@,$MAINTAINER_MODE_FALSE,;t t - s,@MAINT@,$MAINT,;t t s,@OCSPD_ARCH_LINUX_TRUE@,$OCSPD_ARCH_LINUX_TRUE,;t t s,@OCSPD_ARCH_LINUX_FALSE@,$OCSPD_ARCH_LINUX_FALSE,;t t --- 22969,22972 ---- Index: configure.in =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/configure.in,v retrieving revision 1.14 retrieving revision 1.15 diff -C2 -d -r1.14 -r1.15 *** configure.in 4 Nov 2005 00:32:09 -0000 1.14 --- configure.in 19 Dec 2005 05:01:17 -0000 1.15 *************** *** 11,20 **** AC_CANONICAL_SYSTEM AM_INIT_AUTOMAKE(OpenCA-OCSPD,`cat VERSION` ) - # AM_CONFIG_HEADER(config.h) dnl Options. #AC_DISABLE_FAST_INSTALL #AC_DISABLE_SHARED ! AM_MAINTAINER_MODE dnl Select OS specific versions of source files. --- 11,19 ---- AC_CANONICAL_SYSTEM AM_INIT_AUTOMAKE(OpenCA-OCSPD,`cat VERSION` ) dnl Options. #AC_DISABLE_FAST_INSTALL #AC_DISABLE_SHARED ! #AM_MAINTAINER_MODE dnl Select OS specific versions of source files. *************** *** 35,38 **** --- 34,38 ---- AM_CONDITIONAL(OCSPD_ARCH_HPUX, test x$arch = xhpux) + if test x$arch = xlinux ; then AC_DEFINE(OCSPD_TARGET_LINUX, 1, [Linux]) *************** *** 139,148 **** dnl Defaults openssl_cflags= ! openssl_libs="-lssl -lcrypto -ldl" dnl Now see if the user specified openssl_prefix if [[ x${openssl_prefix} != x ]]; then openssl_cflags=[-I${openssl_prefix}/include] ! openssl_libs=["-L${openssl_prefix}/lib -L${openssl_prefix} -lssl -lcrypto -ldl"] openssl_setup=yes dnl AC_MSG_RESULT( [User specified --with-openssl-prefix]) --- 139,148 ---- dnl Defaults openssl_cflags= ! openssl_libs="-lssl -lcrypto " dnl Now see if the user specified openssl_prefix if [[ x${openssl_prefix} != x ]]; then openssl_cflags=[-I${openssl_prefix}/include] ! openssl_libs=["-L${openssl_prefix}/lib -L${openssl_prefix} -lssl -lcrypto "] openssl_setup=yes dnl AC_MSG_RESULT( [User specified --with-openssl-prefix]) *************** *** 191,195 **** ## End of OpenSSL build settings section ## ! AC_OCSPLIB dnl Enable OPENLDAP Support --- 191,217 ---- ## End of OpenSSL build settings section ## ! dnl Let's check the presence of OCSP extensions ! dnl AC_OPENSSL_OCSP ! ! dnl Let's check the openssl version ! dnl AC_EGREP_HEADER( [m/OPENSSL/gm], ! dnl [${openssl_prefix}/include/openssl/opensslv.h], ! dnl [openssl_ver="0.9.8+"], ! dnl [openssl_ver="0.9.7"]) ! dnl ! dnl if [[ openssl_ver = "0.9.8+" ]] ; then ! dnl AC_DEFINE(OPENSSL_VER_00908000) ! dnl else ! dnl AC_DEFINE(OPENSSL_VER_00907000) ! dnl fi ! dnl ! dnl AC_MSG_RESULT([OpenSSL Detected Version: $openssl_ver]); ! dnl ! dnl CFLAGS=${openssl_flags} ! ! dnl AC_OPENSSL_VERSION ! ! dnl AM_CONDITIONAL(OPENSSL_VER_00908000, if test "x$openssl_ver" = "x0.9.8+" ) ! dnl AC_MSG_RESULT([OpenSSL Detected Version: $openssl_ver]); dnl Enable OPENLDAP Support |
|
From: <ope...@li...> - 2005-12-19 05:01:29
|
Update of /cvsroot/openca/openca-0.9/src/ocspd/docs In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15819/docs Modified Files: Makefile.in Log Message: Added chroot capabilities. Need to be tested more. --- madwolf Author of changes: madwolf Index: Makefile.in =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/docs/Makefile.in,v retrieving revision 1.17 retrieving revision 1.18 diff -C2 -d -r1.17 -r1.18 *** Makefile.in 4 Nov 2005 00:32:09 -0000 1.17 --- Makefile.in 19 Dec 2005 05:01:18 -0000 1.18 *************** *** 109,115 **** LN_S = @LN_S@ LTLIBOBJS = @LTLIBOBJS@ - MAINT = @MAINT@ - MAINTAINER_MODE_FALSE = @MAINTAINER_MODE_FALSE@ - MAINTAINER_MODE_TRUE = @MAINTAINER_MODE_TRUE@ MAKEINFO = @MAKEINFO@ OBJEXT = @OBJEXT@ --- 109,112 ---- *************** *** 213,217 **** .SUFFIXES: .SUFFIXES: .pod ! $(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ --- 210,214 ---- .SUFFIXES: .SUFFIXES: .pod ! $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ *************** *** 238,244 **** cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(top_srcdir)/configure: @MAINTAINER_MODE_TRUE@ $(am__configure_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(ACLOCAL_M4): @MAINTAINER_MODE_TRUE@ $(am__aclocal_m4_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh --- 235,241 ---- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(top_srcdir)/configure: $(am__configure_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(ACLOCAL_M4): $(am__aclocal_m4_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh |
|
From: <ope...@li...> - 2005-12-19 05:01:29
|
Update of /cvsroot/openca/openca-0.9/src/ocspd/etc In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15819/etc Modified Files: Makefile.in Log Message: Added chroot capabilities. Need to be tested more. --- madwolf Author of changes: madwolf Index: Makefile.in =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/etc/Makefile.in,v retrieving revision 1.15 retrieving revision 1.16 diff -C2 -d -r1.15 -r1.16 *** Makefile.in 4 Nov 2005 00:32:09 -0000 1.15 --- Makefile.in 19 Dec 2005 05:01:18 -0000 1.16 *************** *** 102,108 **** LN_S = @LN_S@ LTLIBOBJS = @LTLIBOBJS@ - MAINT = @MAINT@ - MAINTAINER_MODE_FALSE = @MAINTAINER_MODE_FALSE@ - MAINTAINER_MODE_TRUE = @MAINTAINER_MODE_TRUE@ MAKEINFO = @MAKEINFO@ OBJEXT = @OBJEXT@ --- 102,105 ---- *************** *** 201,205 **** .SUFFIXES: ! $(srcdir)/Makefile.in: @MAINTAINER_MODE_TRUE@ $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ --- 198,202 ---- .SUFFIXES: ! $(srcdir)/Makefile.in: $(srcdir)/Makefile.am $(am__configure_deps) @for dep in $?; do \ case '$(am__configure_deps)' in \ *************** *** 226,232 **** cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(top_srcdir)/configure: @MAINTAINER_MODE_TRUE@ $(am__configure_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(ACLOCAL_M4): @MAINTAINER_MODE_TRUE@ $(am__aclocal_m4_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ocspd: $(top_builddir)/config.status $(srcdir)/ocspd.in --- 223,229 ---- cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(top_srcdir)/configure: $(am__configure_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ! $(ACLOCAL_M4): $(am__aclocal_m4_deps) cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ocspd: $(top_builddir)/config.status $(srcdir)/ocspd.in |
|
From: <ope...@li...> - 2005-12-19 05:01:27
|
Update of /cvsroot/openca/openca-0.9/src/ocspd/build In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv15819/build Modified Files: acinclude.m4 Log Message: Added chroot capabilities. Need to be tested more. --- madwolf Author of changes: madwolf Index: acinclude.m4 =================================================================== RCS file: /cvsroot/openca/openca-0.9/src/ocspd/build/acinclude.m4,v retrieving revision 1.2 retrieving revision 1.3 diff -C2 -d -r1.2 -r1.3 *** acinclude.m4 7 Jan 2004 14:02:39 -0000 1.2 --- acinclude.m4 19 Dec 2005 05:01:18 -0000 1.3 *************** *** 1,3 **** - dnl Check for OCSP support libraries in installed openssl dnl maybe a better check for the libraries should be required --- 1,2 ---- *************** *** 5,10 **** dnl support it here too ! AC_DEFUN(AC_OCSPLIB, ! [ AC_TRY_RUN( [ #include <openssl/ocsp.h> int main(void) --- 4,9 ---- dnl support it here too ! AC_DEFUN(AC_OPENSSL_OCSP, ! [ AC_RUN_IFELSE( [ #include <openssl/ocsp.h> int main(void) *************** *** 25,26 **** --- 24,40 ---- fi]) + AC_DEFUN(AC_OPENSSL_VERSION, + [ AC_EGREP_HEADER( [\#define\sOPENSSL_VERSION_NUMBER\s0x], + [ $openssl_prefix/include/opensslv.h ], + [ openssl_ver="0.9.8+"], + [ openssl_ver="0.9.7"] + ); + + if [[ openssl_ver = "0.9.8+" ]] ; then + AC_DEFINE(OPENSSL_VER_00908000) + else + AC_DEFINE(OPENSSL_VER_00907000) + fi + AC_MSG_RESULT([OpenSSL Detected Version: $openssl_ver]); + ]) + |
1 message has been excluded from this view by a project administrator.
