WG: [Openca-Users] After 100000 certificate issued...

2006-09-19 Thread thomas.beckmann 
I found this in the OpenCA-Users mailinglist.

Any ideas or suggestions?

Regards

Thomas

 -Ursprüngliche Nachricht-
 Von: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] Im 
 Auftrag von Diego de Felice
 Gesendet: Montag, 18. September 2006 23:32
 An: Ideas, tips and discussions about OpenCA installation and 
 management.
 Betreff: [Openca-Users] After 10 certificate issued...
 
  I've tested OpenCA (an old version to be honest) by issuing 
 more than 10 certificates. The response times of course 
 are a bit degraded.
 I can say that the global functionality of OpenCA are not so 
 much influenced (only some pages regardings searches, but I 
 think they can be simply fixed). The most terrible issue 
 however is OpenSSL and its index.txt! With 10 and more 
 certificates the index.txt file is about 19 megabytes and for 
 every certificate you must wait a lot of seconds and this is 
 more and more notable when this number grows. I know this is 
 not to OpenCA related, but someone knows if there is a 
 project to enhance index.txt in a more performing solution 
 ? Is the nextgen OpenCA less dependent from the command line openssl ?
 
  Thanks in advance.
 
 --
 Diego de Felice
 
 --
 ---
 Take Surveys. Earn Cash. Influence the Future of IT Join 
 SourceForge.net's Techsay panel and you'll get the chance to 
 share your opinions on IT  business topics through brief 
 surveys -- and earn cash 
 http://www.techsay.com/default.php?page=join.phpp=sourceforge
CID=DEVDEV
 ___
 Openca-Users mailing list
 Openca-Users@lists.sourceforge.net
 https://lists.sourceforge.net/lists/listinfo/openca-users
 
 
__
OpenSSL Project http://www.openssl.org
User Support Mailing Listopenssl-users@openssl.org
Automated List Manager   [EMAIL PROTECTED]

Re: WG: [Openca-Users] After 100000 certificate issued...

2006-09-19 Thread Peter Sylvester 

[EMAIL PROTECTED] wrote:

I found this in the OpenCA-Users mailinglist.

Any ideas or suggestions?

  
use the 'openssl ca' command with an empty index.txt file for each new 
certificate.
and then manages the files differently, i.e. copy the content into a 
database.
Or don't use the ca at all and use x509 and for revocation, just create 
an index.txt

with the revoked certs.


--
To verify the signature, see http://edelpki.edelweb.fr/ 
Cela vous permet de charger le certificat de l'autorité; 
die Liste mit zurückgerufenen Zertifikaten finden Sie da auch. 



smime.p7s
Description: S/MIME Cryptographic Signature