Chris Covell wrote:
1. A script running as a client to generate the certificate requests with incremental counters for names.Did you checked the batchprocessors on the CA?
2. A script running as a client to the RA to approve the requests.
Import new user
---------------
There must be a file batch_new_user.txt placed at the ImportDevice. The file has the following format:
Example:
ID mbell
ROLE User
DN [EMAIL PROTECTED], CN=Michael Bell, OU=Trustcenter, O=HU, C=DE
SUBJECT_ALT_NAME email:[EMAIL PROTECTED]
next dataset (seperated by a newline)
The attributes in the DN must exactly match the definitions of OpenSSL which is casesensitive!
Import the permissions for the users
------------------------------------
(fullautomatic-mode)
ID mbell
newPIN grant
newKey grant
backupKey grant
newCSR grant
approvePendingCSR grant
4. A better file transfer mechanism than floppy disks (!!!!) I think I shall have to network the CA for the duration of the test and move the output and input files about on the network.That's easy. Change Export/ImportDevice in ca.conf. It must be a file or device.
Michael
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
