Hi all, I guess some of you had problems in configuring access to node management, etc... indeed it can be tricky on some systems (e.g. in Fedora) as the SSLOptions in the default configuration (/etc/http/conf.d/ssl.conf) are wrongly set only for some directories/files. You can try setting it correctly form this:
<Files ~ "\.(cgi|shtml|phtml|php3?)$">
SSLOptions +StdEnvVars +ExportCertData
</Files>
<Directory "/var/www/cgi-bin">
SSLOptions +StdEnvVars +ExportCertData
</Directory>
to the simpler:
SSLOptions +StdEnvVars +ExportCertData
I am also finishing fixing some bugs in the packaging (especially in the
area of the OPENCA/etc/). More precisely:
- Fixed a bug that prevented the configure_etc.sh script to correctly
update the .xml files from the .xml.template
- Included the execution of the configure_etc.sh script inside the openca_rc
script. Therefore you do not need to do that separately from starting
openca.
- To fix a security flaw --- i.e. default password being on all the systems
the same, which could lead admins to leave it as it is --- now after
installation the first time openca is started it will ask for a password
to be used on the web interfaces.
- Fixed the missing creation of the OPENCA/var/crypto/crls dir which caused
the creation of new CRLs to fail (only if you used .rpm packages)
I'll publish the rc2 version soon... :)
Cheers,
--
Best Regards,
Massimiliano Pala
--o------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager] [EMAIL PROTECTED]
[EMAIL PROTECTED]
Dartmouth Computer Science Dept Home Phone: +1 (603) 397-3883
PKI/Trust - Office 063 Work Phone: +1 (603) 646-9179
--o------------------------------------------------------------------------
smime.p7s
Description: S/MIME Cryptographic Signature
------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________ OpenCA-Devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-devel
