Turbo Fredriksson wrote:
On 9 Apr 2017, at 17:55, Howard Chu hyc@symas.com wrote:
- What if I want a new certificate for that RDN? Such as the previous one is [about to] expire and it needs to be refreshed (preferably (?) without destroying/removing the old one).
Currently you would have to delete the old one first.
Ok, thanx. Not that big a’ deal I guess.
I've noted this in the manpage now.
- Is the CAs _public_ key available as well? Same reason as point 1.
If the overlay generated it, then it is stored in cACertificate;binary in the suffix entry of the database.
Awesome! Update the man page about this as well then :)
Done.
- If I already have a CA “on premises” and that have created an intermediate CA I’d like to use for “autoca”, could this be done?
You can replace cACertificate;binary and cAPrivateKey;binary of the suffix entry to force this.
I see, that’s quite smart! So they’re writable, not just read-only then. This should probably also be documented.
Is that true for userCertificate and userPrivateKey as well?
Yes. Also noted in the manpage.
If you're running git master, you can look at test066-autoca and see how it works.
On 9 Apr 2017, at 20:51, Howard Chu hyc@symas.com wrote:
If you're running git master, you can look at test066-autoca and see how it works.
Thanx, I’ll have a look at that as well.
Unfortunately, we’re closing in on a release here at work, and I have several things that _must_ be finished before that. So I won’t have time to look at this in more detail for the next few weeks/months :(.
-
Howard Chu -
Turbo Fredriksson