ca.conf.in

Perl写的CA认证程序

## Configuration File for OpenCA Software Package
## (c) 1999 by Massimiliano Pala and OpenCA Group
## All Rights Reserved

## Crypto Section
## ==============
openssl    	"@OPENSSL@"
opensslEngine 	"@ENGINE@"
sslconfig  	"@ca@/@OPENSSL_CFG_DIR@/openssl.cnf"
sslindex   	"@ca@/@OPENSSL_CFG_DIR@/index.txt"
sslserial  	"@ca@/@OPENSSL_CFG_DIR@/serial"
VerifyPath 	"@prefix@/bin/openca-verify"
SignPath   	"@prefix@/bin/openca-sign"
MakePath   	"@MAKE@"

## Path to the signature verification program

## General Section
## ===============

## use DB or DBI here - DB is DBM-files and DBI is RDBMS
## config DBI via DBI.conf
DBmodule 		"@dbmodule@"

MaxReturnedItems 	30
 
TempDir    		"@ca@/tmp"
certsIndex 		"@ca@/@OPENSSL_CFG_DIR@/index.txt"
extFilesDir		"@ca@/@OPENSSL_CFG_DIR@/extfiles"
 
basedir 		"@ca@"
OpencaDir 		"@ca@"                                                   

## Sheets (HTML) Section
## =====================

pendingbasesheet 	"sheets/ca_pending_reqs.html"
PendingRequestSheet 	"sheets/ca_view_req.html"

renewbasesheet 		"sheets/ca_renew_reqs.html"
RenewRequestSheet 	"sheets/ca_view_renew.html"

revokebasesheet 	"sheets/ca_revoke_reqs.html"
RevokeRequestSheet 	"sheets/ca_view_rev.html"

deletedbasesheet 	"sheets/ca_deleted_reqs.html"
DeletedRequestSheet 	"sheets/ca_view_del.html"

archiviedbasesheet 	"sheets/ca_archivied_reqs.html"
ArchiviedRequestSheet 	"sheets/ca_view_arc.html"

NewCertsDir 		"@ca@/outbound/certs"
NewReqsDir 		"@ca@/inbound/reqs"

CertsBaseSheet 		"sheets/issued_certs.html"

CRLBaseSheet 		"sheets/issued_crls.html"

ViewCRLSheet 		"sheets/view_crl.html"
pendingRevokingSheet 	"forms/revpend.form"

BaseCertsList 		"sheets/issued_certs.html"
BaseSearchList 		"sheets/ca_search_list.html"

ValidCertSheet 		"sheets/viewValidCert.html"
ViewCertSheet 		"sheets/viewCert.html"

ViewSignatureSheet 	"sheets/viewSignature.html"

## Role Management Section
## =======================
ShowRolesSheet 		"sheets/rbac.html"
ManageRoleSheet 	"sheets/manage_role.html"
EditRoleSheet 		"sheets/edit_role.html"
ShowChangedRoleSheet 	"sheets/show_changed_role.html"
ChangeRoleSheet 	"sheets/change_role.html"
AddRoleSheet 		"sheets/add_role.html"
ShowPreparedRoleSheet 	"sheets/show_prepared_role.html"

## Role section
OrganizationUnit "User" "RA Operator" "Web Server" "Network Server"
Country "@country@"
Locality "@loc@"

GenCADBSheet             "sheets/gencadb.html"
EditACSheet              "sheets/edit_ac.html"
EditACOfRoleSheet        "sheets/edit_ac_of_role.html"
ShowChangedACOfRoleSheet "sheets/show_changed_ac_of_role.html"

ShowSectionsSheet       "sheets/show_sections.html"
EditSectionSheet        "sheets/edit_section.html"
ShowChangedSectionSheet "sheets/show_changed_section.html"
ChangeSectionSheet      "sheets/change_section.html"

## CA Initialization Section
## =========================
GenSKeySheet 		"sheets/genskey.html"
GenCAReqSheet 		"sheets/gencareq.html"
GenCADBSheet   		"sheets/gencadb.html"
GenCACertSheet 		"sheets/gencacert.html"

## Certificates Section
## ====================

CACertificate 		"@ca@/stuff/cacert.pem"
CAKey 			"@ca@/private/cakey.pem"
CRLDir 			"@ca@/crl"                                                  
## Directory or device where to store backup copies of exported data
ExportCertsBackup 	"@ca@/certs/backup"


## Archivier Section
## =================

## The $dest and $orig will be replaced by the given values
## in the In/Out section and in the pendingreqs keyword.
##
## For UnpackArchive the $orig is taken from the ImportDev
## and the $dest from the pendingreqs.
##
## For CreateArchive the $dest is taken from the ExportDev
UnpackArchive 		"@TAR@ xvfp $orig -C $dest"
CreateArchive 		"@TAR@ cvfp $dest "
TestArchive   		"@TAR@ tvfp $dest"

## In/Out Section
## ==============
##
## The used ExportDest and ImportOrig are files used to export and/or
## import archive of Certification Requests and Issued Certificates
## (it can be used a device as well such as /dev/fd0 on a Linux
## or, if you use it on a Solaris an you want to avoid disabling
## the volume manager, use the PreIOExec and PostIOExec with a
## sequence of volcheck/mount/etc... )
## ExportDev "/tmp/openca-outca.tar"
## ImportDev "/tmp/openca-inca.tar"
ExportDev 		"/dev/fd0"
ImportDev 		"/dev/fd0"

## Commands to be executed before and/or after the impoting process
## or exporting process. You can Omit theese lines as if they are not
## present will be ignored. *Actually not implemented*
PreIOExec "eject floppy"
PostIOExec "eject floppy"