To Software - To Overview Projects Board - To Webdb Sys Administration
Software: Webdb Documentation (Project WIP)
Overview
Source Code
Tarball thru CAcert main website: About CAcert.org - Sourcecode
git repository: Systems - GIT Repository / Development Workflow
Orphan files in repository
Installation
- Post-installation tasks
- load Location Database
- Add new Root and Subroots
- Add root and subroots descriptions into table Root_Certs
Database
Groups of Users
- new members
- members
- fully assured members
- prospective assurers
- assurers
- experienced assurers
- organisation admins (assurers within organisations)
- organisation assurers
- support engineers
Main Functions
User account functions
- create account
- account verification
- setting up user account
- notifications
- list me
- set location
- lost password questions
- define language
- secondary language settings
- modify account
- delete account
- email dispute
- domain dispute
- create email
- create client cert
- create domain
- create server cert
- create gpg/pgp key
- enable special flags
- codesigning
- assurer flag
- admin flag
- ttpadmin
- orgadmin
- board
- tverify
- locadmin
- adadmin
adadmin = 0 => (default) no ADS request or confirm function is allowed to the user, view ADS is enabled to all users
adadmin = 1 => customer is enabled to request ADs
adadmin = 2 => Treasurer or other CAcert people (Board? Support-Engineers?) can check outstanding ADS requests and can confirm the request, so ADS are placed onto the main website under the right bar menu
- other special flags
- locked
- assurer_blocked
- otppin
- uniqueID
- orphash
Assurer functions
- CATS
- Is Assurer flag
- List of CATS passed
- Assure someone
- Revoke Assurance
Support Engineer functions
- search user
- search domain
Organisation Assurer functions
Organisation Admin functions
Location (database) Admin functions
TTP admin functions
Board flag functions
Tverify flag functions (depricated)
AD admin functions
adadmin = 0 => (default) no ADS request or confirm function is allowed to the user, view ADS is enabled to all users
adadmin = 1 => customer is enabled to request ADs
adadmin = 2 => Treasurer or other CAcert people (Board? Support-Engineers?) can check outstanding ADS requests and can confirm the request, so ADS are placed onto the main website under the right bar menu
PG 2011-07-26 Yes, adadmin=1 is for the customers who can easily request multiple links whenever they want to. Be careful with the ads, though: too many ads (>=5 I would say) will decrease our Google rank, since Google does not like irrelevant advertisement, and our Google ad income will drop considerably.
Structure
The system structure is splitted to the Webdb (web application and database) and the Signer (CA)
- Webdb
- Entry point
- index.php
- account.php
- wot.php
- Entry point
- Signer
- The signer communication is splitted to client.pl and server.pl
2 scripts that communicates thru a serial line connection between the physical machine Webdb and Signer
client.pl is running on the Webdb side (the client)
server.pl is running on the Signer side (the server)
Database Access
External Access
CommModule
The CommModule is the systems heart to send certificate signing requests (client.pl) from the Webdb machine thru a serial connection to the Signer server (server.pl).
Maintenance
Procedures