I am trying to figure out how to specify my CA/REALM architecture in the
OpenXPKI config, specifically openxpki.conf from which config.xml is
derived (I think). Any help how to specify this set up will be
appreciated.
* This is a hierarchical CA architecture.
* There are three profiles: CA, EMPLOYEES, and DEVICES.
* Items in [] are issuing CAs.
* [SUB_CA] represents a subsidiary business units, which
has EMPLOYEES and DEVICES.
[ROOT_CA] --> [SUB_CA_1] --> [EMPLOYEES_1]
| --> [DEVICES_1]
|-> [SUB_CA_2] --> [EMPLOYEES_2]
| --> [DEVICES_2]
|-> [SUB_CA_3] --> [EMPLOYEES_3]
| --> [DEVICES_3]
Housing the services will initially be on one machine. Future
architecture is a server for each [SUB] and its sub-CAs, specifically
EMPLOYEES and DEVICES. These SUB_CAs can be tied to the root services.
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users
