> Johan van Vliet wrote: > > I'm currently reviewing NewPKI (beta4) as a replacement for our current > > OpenCA installation. Has anyone done this before? From what I understand > > fro the archive I need to get the version from the CVS in order to import > > my current certificates. > > No, I have backported the feature yet, but if you decide to use NewPKI > let me know and I'll do it.
That would be real cool. For now I'll manage with Beta4 but if we are going to cross-over to NewPKI we need this feature. > > Is it possible to import the old server and client certificates (in the > > CVS version)? > No, normally it's not, but I could work on doing such a feature. This is not a real big problem but it would help. This way we should be able to renew a certificate rather than just issue new ones. So yes it would be very helpfull but this is not a real big issue for me. The reason why we are investigating this right now is because right now we only have a dozen or 2 certificates out in the field but between now and somewhere early next year this is going to increase a lot and OpenCA is very clumbersom (even for PKI standards ;-)). > > Will it correctly adopt the last used serial? > No, but I guess it's not a bad idea :) I would thinks so ;-). > > Any other hints on what I need to do to get this beast running? > Well, there is not EE site on the current version, I don't know if on > your OpenCA installation your clients where requesting certificates > directly from a site, but on the current version of NewPKI it won't be > possible. Not a problem. But thanks for reminding. We don't use it as we "should" if we would have our users to get them to apply for there own certificate we would never get one out the door. So we request them for them and install them locally. Thanks for the help. J. _____________________________________________________________________ NewPKI http://www.newpki.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]
