(CATOOL) Re: CATool question

[Bon sy]

Mikem

	Thanks for the note. I am aware of the instruction you described
below and have been using to renew standard/client/server
certificates. My problem is that the root certificate I sent you (or other
root certificates) within the CATool environment just was not offered the
option of renewal! Even I can renew all other certificates, but not the
root certificate (the renewal option does not show up in the web UI).

Bon


On Wed, 31 Aug 2005, Mike McCauley wrote:

> Hello Bon,
> 
> Thnaks for your note.
> 
> On Tuesday 30 August 2005 12:25, Bon sy wrote:
> > I am not talking about the CATool root certificate. But rather a root
> > certificate created from using the CATool, which was set to expire in one
> > year. See the root certificate in the attachment.
> >
> > In any event, the issue is not whether the root certificate lasts for 10
> > years. But the issue is whether the CATool provides a utility to renew the
> > root certificate that was generated.
> >
> > In the case of using openssl, I can easily re-create the root certificate
> > (in our old environment). But I could not find the user interface in
> > CATool to renewal the root certificate, nor could I re-create it
> > via the GUI interface ... even if as the last resort we need to re-create
> > the entire CA structure. So, does it mean that we need to re-install
> > CATool? This  makes the CATool a less-than-idea commercial product.
> 
> You can renew any certificate created with CATool:
> 1. From the Main Menu, click on 'View Directory of Certificates'
> 2. Click on View next to the certificate you wish to renew.
> 3. Scroll down and click on the 'Request Renewal' button.
> 4. Click on Submit.
> 5. An administrator can then sign the renewed certificate.
> 
> Cheers.
> 
> >
> > Bon
> >
> > On Tue, 30 Aug 2005, Mike McCauley wrote:
> > > Hello,
> > >
> > > On Tuesday 30 August 2005 00:53, you wrote:
> > > > Mike,
> > > > 	Sorry that I did not post it to the CATool listserv. I do not have
> > > > the email address for that.
> > >
> > > Its catool at open.com.au
> > >
> > > > 	I have a (hopefully) rather trival question. I have a root
> > > > certificate that has expired. I do not seem to find the CATool option
> > > > to renewal the root certificate even I could easily renewal a
> > > > client/server certificate. ANy idea?
> > >
> > > Hmmm, are you sure? Your root certificate should be valid for 10 years.
> > >
> > > Cheers.
> > >
> > > > 	Thanks!
> > > >
> > > > Bon
> > >
> > > --
> > > Mike McCauley                               mikem at open.com.au
> > > Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
> > > 9 Bulbul Place Currumbin Waters QLD 4223 Australia  
> > > http://www.open.com.au Phone +61 7 5598-7474                       Fax  
> > > +61 7 5598-7070
> > >
> > > Radiator: the most portable, flexible and configurable RADIUS server
> > > anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
> > > Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
> > > TTLS, PEAP etc on Unix, Windows, MacOS etc.
> 
> -- 
> Mike McCauley                               mikem at open.com.au
> Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
> 9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
> Phone +61 7 5598-7474                       Fax   +61 7 5598-7070
> 
> Radiator: the most portable, flexible and configurable RADIUS server 
> anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
> Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
> TTLS, PEAP etc on Unix, Windows, MacOS etc.
> 
> --
> Archive at http://www.open.com.au/archives/catool/
> Announcements on catool-announce at open.com.au
> To unsubscribe, email 'majordomo at open.com.au' with
> 'unsubscribe catool' in the body of the message.
> 

--
Archive at http://www.open.com.au/archives/catool/
Announcements on catool-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe catool' in the body of the message.