Dear Developers, 

I have applied your suggested configuration by duplicating the 
<pki_realm>...</pki_realm> with different configuration. It works but this new 
PKI realm has no relation with the previous PKI realm. Previous Pki realm 
contains self signed certificate. Lets assume the default/previous CA realm as 
ROOT CA....Now I want a Sub CA to be created whose certificate should be signed 
by the RootCA. There is no option in Web interface to generate a Sub CA 
certificate. How can i do it?

Scotty



________________________________
From: Martin Bartosch <[email protected]>
To: Scott Thomas <[email protected]>
Cc: [email protected]; [email protected]; [email protected]
Sent: Mon, December 14, 2009 4:48:32 PM
Subject: Re: Multiple and Hierarchical CA's under a main PKI Realm

Hi,

> Kindly tell me complete set of configuration changes in  XML files and some 
> sample changes so that i configure OpenXPKI to get this feature "Multiple and 
> Hierarchical CA's under a main PKI Realm".

technically you just duplicate the <pki_realm>...</pki_realm> section in your 
config.xml and configure the realms appropriately. You then need to import the 
necessary CA certificates into the database using openxpkiadm.
Literally, the rest is design and planning which is out of scope of OpenXPKI.

Cheers
Martin


      
------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev 
_______________________________________________
OpenXPKI-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openxpki-users

Reply via email to