Michael Portz wrote:
Well..what helped me in the same situation
was to STRICTLY keep those two versions apart.
That means: different "--prefix", "--with-openca-prefix",
"--with-module-prefix" and "--with-httpd-fs-prefix".
What me surprised was that you could use the
same "--with-web-host", but I guess that was
just me... :)


actually you don't nee to keep them strictly apart for example it doesn't make much sense to separate the module stuff... you can go for even more nodes on the same computer this way... and have the modules just one time there - this is also practical for personal code-changes, if you have special needs - you change it once and can test it will all nodes and interfaces, as far as its the general modules

i attached two setups i usaly use to 'simulate' two separated installations at one system

than you can work like you would have to separte installations
so you can check the dataexchange processes are working properly
and so on...

for dataexchange i than just use a directory like:
/usr/local/pki-new/operating/exchange/filename

so in the exchange directory are different files for the different
levels of the hirarchy like level-00 level-01 which than would
for example be used: 00 for ca->sub-ca and 01 for sub-ca->ra
and so on

for final deploy you just put one - lets say the offline part
at a different computer - change the exchange behavior - like
the paths to point to fd0 or some usb-stick stuff or through
scp...

greetings
dalini


online configuration ./configure \ --prefix=/usr/local/pki-new/operating/ra \ --enable-ocspd \ --enable-scep \ --with-openca-user=pki \ --with-openca-group=pki \ --with-web-host=pki.somehost.de \ --with-httpd-url-prefix=/pki/ra/ \ --with-hierarchy-level=ra \ --with-httpd-user=apache \ --with-httpd-group=apache \ --with-module-prefix=/usr/local/pki-new/operating/modules

offline configuration
./configure \
 --prefix=/usr/local/pki-new/operating/ca \
 --disable-ocspd \
 --disable-scep \
 --with-openca-user=pki \
 --with-openca-group=pki \
 --with-web-host=pki.somehost.de \
 --with-httpd-url-prefix=/pki/ca \
 --with-hierarchy-level=ca \
 --with-httpd-user=apache \
 --with-httpd-group=apache \
 --with-module-prefix=/usr/local/pki-new/operating/modules



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users

Reply via email to