You can subscribe to this list here.
2001 |
Jan
|
Feb
|
Mar
(30) |
Apr
(18) |
May
(19) |
Jun
(19) |
Jul
(18) |
Aug
(90) |
Sep
(78) |
Oct
(166) |
Nov
(43) |
Dec
(19) |
---|---|---|---|---|---|---|---|---|---|---|---|---|
2002 |
Jan
(11) |
Feb
(47) |
Mar
(46) |
Apr
(104) |
May
(35) |
Jun
(5) |
Jul
(11) |
Aug
(28) |
Sep
(8) |
Oct
(45) |
Nov
(20) |
Dec
(26) |
2003 |
Jan
(18) |
Feb
(18) |
Mar
(89) |
Apr
(38) |
May
(29) |
Jun
(16) |
Jul
(17) |
Aug
(11) |
Sep
(62) |
Oct
(23) |
Nov
(23) |
Dec
(23) |
2004 |
Jan
(96) |
Feb
(27) |
Mar
(28) |
Apr
(48) |
May
(47) |
Jun
(48) |
Jul
(142) |
Aug
(170) |
Sep
(94) |
Oct
(50) |
Nov
(130) |
Dec
(58) |
2005 |
Jan
(22) |
Feb
(131) |
Mar
(78) |
Apr
(50) |
May
(42) |
Jun
(77) |
Jul
(82) |
Aug
(70) |
Sep
(53) |
Oct
(36) |
Nov
(26) |
Dec
(44) |
2006 |
Jan
(22) |
Feb
(22) |
Mar
(4) |
Apr
(1) |
May
(15) |
Jun
(3) |
Jul
(5) |
Aug
(12) |
Sep
(14) |
Oct
(3) |
Nov
(1) |
Dec
(1) |
2007 |
Jan
(7) |
Feb
(4) |
Mar
(1) |
Apr
(2) |
May
(15) |
Jun
(7) |
Jul
(5) |
Aug
(1) |
Sep
(1) |
Oct
(6) |
Nov
(1) |
Dec
(9) |
2008 |
Jan
(1) |
Feb
(3) |
Mar
(3) |
Apr
(2) |
May
|
Jun
|
Jul
|
Aug
(3) |
Sep
(1) |
Oct
(9) |
Nov
(3) |
Dec
(14) |
2009 |
Jan
(8) |
Feb
(1) |
Mar
(1) |
Apr
(1) |
May
(5) |
Jun
(3) |
Jul
(1) |
Aug
|
Sep
(2) |
Oct
(3) |
Nov
(6) |
Dec
|
2010 |
Jan
(2) |
Feb
(6) |
Mar
(4) |
Apr
(1) |
May
(2) |
Jun
(1) |
Jul
(1) |
Aug
(2) |
Sep
(18) |
Oct
(9) |
Nov
(2) |
Dec
(1) |
2011 |
Jan
(1) |
Feb
(2) |
Mar
|
Apr
(3) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
2012 |
Jan
|
Feb
|
Mar
|
Apr
|
May
|
Jun
|
Jul
|
Aug
|
Sep
(2) |
Oct
|
Nov
|
Dec
|
2013 |
Jan
|
Feb
(1) |
Mar
(1) |
Apr
(1) |
May
|
Jun
(2) |
Jul
(4) |
Aug
(2) |
Sep
(11) |
Oct
(1) |
Nov
|
Dec
(9) |
2014 |
Jan
(1) |
Feb
(2) |
Mar
(2) |
Apr
(1) |
May
(4) |
Jun
|
Jul
(1) |
Aug
|
Sep
|
Oct
(4) |
Nov
(1) |
Dec
(2) |
2015 |
Jan
|
Feb
|
Mar
|
Apr
(1) |
May
|
Jun
|
Jul
|
Aug
|
Sep
|
Oct
|
Nov
|
Dec
|
From: Massimiliano P. <ma...@ha...> - 2001-03-24 13:17:49
|
Michael Bell wrote: > > Hi, > > we are using listItems ( DATATYPE => "xyz" ) in several cases. Could we > use searchItems ( DATATYPE => "xyz" ) insteed? This is because the listItems function is faster because does not need to match for values. Why do you prefer using the searchItems ??? -- C'you, Massimiliano Pala --o------------------------------------------------------------------------- Massimiliano Pala [OpenCA Project Manager] ma...@op... ma...@ha... http://www.openca.org Tel.: +39 (0)59 270 094 http://openca.sourceforge.net Mobile: +39 (0)347 7222 365 |
From: Massimiliano P. <ma...@ha...> - 2001-03-24 13:16:05
|
Michael Bell wrote: > No, the parsing code of the CRR module is different. I correct some bugs > in the CRR module and add some new variables. > > I write three new scripts for the cmds/ directory - > (new|show|submit)_ask4rev > These scripts allow you to revoke a certificate which you own from > cgi-public without enforced VerifyClient on the apache. I will submit > the scripts on the weekend and correct the links (for test_cert too). Ok. > The script submit_ask4rev store the request under /crl/pending and in > the database (as PENDING_CRR). Why do we need a directory /crl/pending? The request should not be saved to /crl/pending... just save into the DB. The CRL pending was for exporting/importing of CRLs. I have to check the code, if it is no more in use we can simply remove from the installation script... > I will have a look on exportReqs, importReqs, listReqs, appRevReq ... on > the weekend. Let me know. -- C'you, Massimiliano Pala --o------------------------------------------------------------------------- Massimiliano Pala [OpenCA Project Manager] ma...@op... ma...@ha... http://www.openca.org Tel.: +39 (0)59 270 094 http://openca.sourceforge.net Mobile: +39 (0)347 7222 365 |
From: Massimiliano P. <ma...@ha...> - 2001-03-23 17:18:46
|
John Waller wrote: > > I still wondering theissues with Internet Exploader v.4.x and higher. > My boss was telling me there are problems with openCA and not supporting > the IE stuff, but considering we generated a PKCS #12 (.p12) cert and > imported just fine into IE v.4.x and v.5.x ... This process is reported to work, in the new version there will be support for IE Certificate Requests without having to generate a .p12 file. > I haven't gone ahead with the LDAP validation process.. but are your > problems due to the session variables that float out and about in > Internet Explorer? The IE request process is not very "straight" - we are currently testing it, anyway some open issues remains (as how to decide the bits number?). > Suggestions on the problems with mod_ssl and openca may be with Internet > Exploader? > or even how to solve it? I'm a pretty good php, perl guy but kinda weak > in the SSL realm.. so I would like to offer up some help if you can just > try and steer me in the right direction to solve this. Well IE problems with SSL are related to the mod_ssl configuration within the apache conf file. I have no problems in connecting using SSL or TSL, anyway this has to be checked extensively - you may find more help from the mod_ssl mailing lists, I guess. -- C'you, Massimiliano Pala --o------------------------------------------------------------------------- Massimiliano Pala [OpenCA Project Manager] ma...@op... ma...@ha... http://www.openca.org Tel.: +39 (0)59 270 094 http://openca.sourceforge.net Mobile: +39 (0)347 7222 365 |
From: Massimiliano P. <ma...@ha...> - 2001-03-23 16:34:51
|
John Waller wrote: > > Question: > We are using OpenLDAP, Apache 1.3.x with mod_authz_ldap and openCA for > our authorization process. > > We are using mod_authz_ldap's suggesions for schema.. but just curious > as to what you guys are doing over there... Actually we are up to fixing bugs for the next release, someone wants to take the LDAP schema task ??? -- C'you, Massimiliano Pala --o------------------------------------------------------------------------- Massimiliano Pala [OpenCA Project Manager] ma...@op... ma...@ha... http://www.openca.org Tel.: +39 (0)59 270 094 http://openca.sourceforge.net Mobile: +39 (0)347 7222 365 |
From: Massimiliano P. <ma...@ha...> - 2001-03-23 16:34:05
|
Tommaso Cucinotta forwarded me your e-mail... > > I have done as you suggested and setenv SSL_CLIENT_M_SERIAL to that of > > tha RAServer certificate and I can see its when I do a printenv from the > > apache cgi- directory. > > > > But now when I click on the pending cert with the recognised operator > > number(number 3 now instead of the default 666) it goes straight to > > cannot access DB as before it brought the cert up with the option to > > approve and only gave that error after I had clicked approve from the CA > > interface. You should check if: o the dB files exist (I think them should be in stuff/ dir). If the issued_certs/revoked_certs files do not exist try making: $ cd $dir $ scripts/createDB.pl $install_dir $ chown user.group $install_dir/issued_certs* $ chown user.group $install_dir/revoked_certs* I have seen there is a bug in the installation script for the RAServer (it does not create the dB files) and this may cause problems on some systems; o read/write permissions should match the web-server user; -- C'you, Massimiliano Pala --o------------------------------------------------------------------------- Massimiliano Pala [OpenCA Project Manager] ma...@op... ma...@ha... http://www.openca.org Tel.: +39 (0)59 270 094 http://openca.sourceforge.net Mobile: +39 (0)347 7222 365 |
From: Massimiliano P. <ma...@ha...> - 2001-03-17 13:11:49
|
Hi all, I have to inform you I'll be in London this afternoon till Thursday. Please have patience if you are waiting for some reply to personal messages. You may contact me at my phone number only if you have urgent needs (it is possible I can not check my e-mail while I am staying in London). -- C'you, Massimiliano Pala --o------------------------------------------------------------------------- Massimiliano Pala [OpenCA Project Manager] ma...@op... ma...@ha... http://www.openca.org Tel.: +39 (0)59 270 094 http://openca.sourceforge.net Mobile: +39 (0)347 7222 365 |
From: Michael B. <mic...@rz...> - 2001-03-16 10:04:24
|
Hi, we are using listItems ( DATATYPE => "xyz" ) in several cases. Could we use searchItems ( DATATYPE => "xyz" ) insteed? Regards Michael ----------------------------------------------------------------------- Michael Bell E-Mail: mic...@rz... Rechenzentrum - Datacenter Tel.: +49+(0)30-2093-2482 Humboldt-University of Berlin Fax.: +49+(0)30-2093-2959 Unter den Linden 6 10099 Berlin Germany |
From: Michael B. <mic...@rz...> - 2001-03-16 10:01:32
|
Massimiliano Pala schrieb: > > Michael Bell wrote: > > > > Massimiliano Pala schrieb: > > > Current REQ module handles the CRRs too, anyway we can think about it. This > > > would add another MODULE to handle the new objects separately, I suppose. > > > > For what is then the CRR-module? > > Actually it is not used, we can use it by adding parsing capabilities and ... > what ?? It seems to be we are going to duplicate code (it is already available > in the REQ module) without adding new functions to it... > > Can't we simply use REQ objects together with new DATATYPES like the ones > you have written on in a previous mail ??? No, the parsing code of the CRR module is different. I correct some bugs in the CRR module and add some new variables. I write three new scripts for the cmds/ directory - (new|show|submit)_ask4rev These scripts allow you to revoke a certificate which you own from cgi-public without enforced VerifyClient on the apache. I will submit the scripts on the weekend and correct the links (for test_cert too). The script submit_ask4rev store the request under /crl/pending and in the database (as PENDING_CRR). Why do we need a directory /crl/pending? I will have a look on exportReqs, importReqs, listReqs, appRevReq ... on the weekend. Regards Michael ----------------------------------------------------------------------- Michael Bell E-Mail: mic...@rz... Rechenzentrum - Datacenter Tel.: +49+(0)30-2093-2482 Humboldt-University of Berlin Fax.: +49+(0)30-2093-2959 Unter den Linden 6 10099 Berlin Germany |
From: Massimiliano P. <ma...@ha...> - 2001-03-14 21:07:01
|
Michael Bell wrote: [listReq vs RAServer_listReq] > I do the change. I change only two lines of code in rbac-utils.lib and > add_right on the CA. So if we want to take at a later time the old > version we can remove it. > > Where I should place RBAC/, extfiles/ and OpenSSL/ on the CVS ? You should use the sourceforge cvs ... reading the docs first helps... All changes now have to be put into the cvs.openca.sourceforge.net as they have imported our CVS and, unfortunately, this can not be done automatically - I have to ask them to import it, so we cannot ask them to do it again... :-D Well, what are the contents of the new dirs ??? The extfiles/ dir can be put into the stuff/ dir. If the RBAC does contains only config files then the right place is the stuff/ directory, the same applies to the OpenSSL/ one... I guess. C'you, Massimiliano Pala --o----------------------------------------------------------- Massimiliano Pala ma...@op... (OpenCA Project Manager) ma...@ha... Tel.: +39 (0)59 270 094 http://www.openca.org Mobile: +39 (0)347 7222 365 |
From: Massimiliano P. <ma...@ha...> - 2001-03-14 20:33:52
|
Michael Bell wrote: > > Massimiliano Pala schrieb: > > Current REQ module handles the CRRs too, anyway we can think about it. This > > would add another MODULE to handle the new objects separately, I suppose. > > For what is then the CRR-module? Actually it is not used, we can use it by adding parsing capabilities and ... what ?? It seems to be we are going to duplicate code (it is already available in the REQ module) without adding new functions to it... Can't we simply use REQ objects together with new DATATYPES like the ones you have written on in a previous mail ??? C'you, Massimiliano Pala --o----------------------------------------------------------- Massimiliano Pala ma...@op... (OpenCA Project Manager) ma...@ha... Tel.: +39 (0)59 270 094 http://www.openca.org Mobile: +39 (0)347 7222 365 |