what is exactly the purpose of the "set passphrase for key enrollment" command on the CA and RA interface under the "Information -> Certificates -> Valid section" in OpenCA 0.9.2-RC4 ?
If you want to enroll a key via the online interface to a user then this page must be protected by an extra passphrase to avoid brute force attacks against the passphrase of the private key. It is also not necessary to offer this page for a long time. After the user downloaded the key you can block all requests again. Therefore we protect this download by an extra passphrase.
Michael -- ------------------------------------------------------------------- Michael Bell Email: [EMAIL PROTECTED] ZE Computer- und Medienservice Tel.: +49 (0)30-2093 2482 (Computing Centre) Fax: +49 (0)30-2093 2704 Humboldt-University of Berlin Unter den Linden 6 10099 Berlin Email (private): [EMAIL PROTECTED] Germany http://www.openca.org
-------------------------------------------------------
This SF.Net email is sponsored by: Oracle 10g
Get certified on the hottest thing ever to hit the market... Oracle 10g. Take an Oracle 10g class now, and we'll give you the exam FREE.
http://ads.osdn.com/?ad_id=3149&alloc_id=8166&op=click
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users
