Netscape Certificate Management System 6.0, Manual

Page: 275 / 377

LdapCrlPublisher Plug-in Module
Chapter 6 Publisher Plug-in Modules 275
LdapUserCertPublisher Publisher
The publisher named
LdapUserCertPublisher
is an instance of the
LdapUserCertPublisher
module. The Certificate Manager automatically creates
this publisher during installation.
You can use this publisher to publish an end-entity certificate to the
userCertificate;binary
attribute of the mapped end-entity’s entry in the
directory.
LdapCrlPublisher Plug-in Module
The
LdapCrlPublisher
plug-in module implements the CRL publisher. This
module enables you to configure a Certificate Manager to publish or unpublish the
CRL to the
certificateRevocationList;binary
attribute of the mapped
directory entry; the configured mapper must locate the CA’s entry so that the
publisher can publish the CRL to the
certificateRevocationList;binary
attribute. The CRL is published as a DER-encoded binary blob.
The CRL publisher requires you to specify just one parameter named
crlAttr
. The
value of this parameter must be
certificateRevocationList;binary
.
During installation, the Certificate Manager automatically creates an instance
(called a publisher) of the
LdapCrlPublisher
module for publishing CRLs to the
directory. See “LdapCrlPublisher Publisher” on page 277.
Table 6-3
Description of parameters defined in the LdapUserCertPublisher module
Parameter Description
certAttr
Specifies the directory attribute of the mapped entry to which the Certificate
Manager should publish the certificate.
Permissible values: Must be
userCertificate;binary
.
Example:
userCertificate;binary