Netscape Certificate Management System 6.01, Manual

Page: 267 / 377

267
Chapter 6
Publisher Plug-in Modules
You can configure a Certificate Manager to publish certificates to an LDAP
directory or flat file, and to publish CRLs to a directory, online validation
authority, or flat file. If you configure the Certificate Manager to publish to any of
these repositories, when the Certificate Manager is requested to issue a certificate
or to update certificate information, it automatically updates the corresponding
entry in the configured repository with relevant information. Similarly, when a
certificate is revoked, the Certificate Manager automatically updates the
configured repositoty with relevant CRL information. To locate the correct entry in
the repository, the Certificate Manager relies on object-mapping rules and to
update the located entry with relevant information, the Certificate Manager relies
on object-publishing rules.
To enable you to construct object-publishing rules, the Certificate Manager
provides a set of publisher plug-in modules. These modules are implemented as
Java classes and are registered with the Certificate Manager’s publishing
framework.
This chapter explains the publisher modules that are installed with a Certificate
Manager—it lists and briefly describes the modules and then explains each one in
detail. Before reading this chapter, you should have read the previous chapter,
Chapter 5, “Mapper Plug-in Modules.”
The chapter has the following sections:
• Overview of Publisher Modules (page 268)
• FileBasedPublisher Plug-in Module (page 270)
• LdapCaCertPublisher Plug-in Module (page 271)
• LdapUserCertPublisher Plug-in Module (page 273)
• LdapCrlPublisher Plug-in Module (page 275)
• OCSPPublisher Plug-in Module (page 277)