Kulpinski, Dejan wrote:

> I would just like to ask you that whatever strategy you
 > guys come up with should allow me to import the
 > certificates from the previous releases of openCA (like it does now).

We will not change the backupmechanism. So if we must change the 
databasedesign (means: add a column) then you can use a backup to 
restore the old state.

> 1) "Export new", where you would export all the new objects
 > (cert, requests...). You can use the flag in the database to
 > indicate what objects have already been exported.

The problem is that we cannot add flags without problems to the 
databaseinterface of OpenCA. OpenCA::DBI is not a problem but OpenCA::DB 
is a problem. Therefore I proposed the concept with the two directories.

If we use a flag then we have to think about the name. The database can 
log exports via EXPORT_FLAG and the imports will be logged in a file 
because it is not possible to log imports in the database because the 
state of an object can change.

> 2) "Export range" where you would export objects in specified
 > range (either by date or serial number). This should not be too
 > complicated to do (at least GUI wise). Two textboxes where user
 > can specify range of objects to export should do it.

This is trivial and not a big problem.

> Whatever you do, try to avoid storing the information about exports outside of the 
>database itself.

Any reasons? It is at minimum a big problem for the imports.

> Then on import you have two choices in terms of design:
> 
> 1) Reject duplicates
> 
> 2) Allow duplicates that would result in updates rather then inserts.

Conflictmanagement later ... :)

Michael
-- 
-------------------------------------------------------------------
Michael Bell                   Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter     Email:  [EMAIL PROTECTED]
Humboldt-University of Berlin  Tel.: +49 (0)30-2093 2482
Unter den Linden 6             Fax:  +49 (0)30-2093 2959
10099 Berlin
Germany                                       http://www.openca.org



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to