On 09/14/2011 04:55 PM, Andrew Wnuk wrote:
On 09/14/2011 01:52 PM, Chandrasekar Kannan wrote:
On 09/14/2011 01:44 PM, Adam Young wrote:
Is using different ports for CA and DRM (an so forth) merely an artifact of using multiple servers, or is there an additional reason to do so?
Pkicreate tool allows selecting any ports. Pkicreate also suggests ports for out of the box ease of use.
There must be more to the story than this. I tried running pkicreate with two of the subsystems using the same port
-agent_secure_port=8443 -ee_secure_port=8443
And when it runs I get the error
[error] Invalid port numbers submitted!
Is there some reason that these cannot be the same port, or is it just convention. Does the agent use some protocol other than HTTP? I get this error is I try to use the same port for any two *_secure_port values.
one is for regular ssl. other is for ssl with "client auth".
- Chandra
Adam can also check docs for more details: http://docs.redhat.com/docs/en-US/Red_Hat_Certificate_System/8.1/html/Comman...
And there I see that specifying the separate ports is an option, but that the first line of the script is for it all to use 3 ports: Unsecure, SSL, startup/shutdown. So multiple ports is not required.
_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel
_______________________________________________ Pki-devel mailing list Pki-devel@redhat.com https://www.redhat.com/mailman/listinfo/pki-devel