Hi Cho, In case you're not that familiar with Perl... you can use a locally-modified copy and put it in a directory that is earlier in the INC path to override the standard OpenXPKI classes. Then your copy won't be overwritten by the original on the next update, but you'll need to make sure your local modifications remain code-compatible.
Used with care, this has been very helpful in some of our customer installations for special situations. Hope this helps, Scott > On May 18, 2017, at 19:28, Oliver Welter <[email protected]> wrote: > > Hi Cho, > > not by config, but with a minor change to the class. In the > CertificateExport.pm file, look around line 45: > > > my $p = { > IDENTIFIER => $cert_identifier, > FORMAT => $key_format, > PASSWORD => $key_password, > ALIAS => $alias, > }; > > and add "KEEPROOT => 1" to the parameter list. You should make a copy of the > file and rename it, otherwise it will be overriden by the next update. > > Oli > > > Am 17.05.2017 um 12:14 schrieb Cho Chan: >> Hi all, >> >> when I download private key in pkcs12/jks format -> the generated file >> format contains private key, public certs + Issuing/Intermediate CA. Is >> there a possibility to include also RootCA inside? >> >> I found out the following workflow: certificate_privkey_export.yaml >> containing the class >> OpenXPKI::Server::Workflow::Activity::Tools::CertificateExport which >> based on the documentation is supporting parameter template with >> chain >> An ARRAY of PEM encoded intermediates, might be empty. >> >> it is written only intermediates, but not Root one... Is there such >> possibility and if yes can you please give me some details how to do it? >> >> Thank you in advance! >> >> Regards, >> Cho >> >> >> ------------------------------------------------------------------------------ >> Check out the vibrant tech community on one of the world's most >> engaging tech sites, Slashdot.org! http://sdm.link/slashdot >> >> >> >> _______________________________________________ >> OpenXPKI-users mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/openxpki-users >> > > > -- > Protect your environment - close windows and adopt a penguin! > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! > http://sdm.link/slashdot_______________________________________________ > OpenXPKI-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/openxpki-users ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ OpenXPKI-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openxpki-users
