Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 426 / 874

Generating Files Required By Third-Party Object Signing Tools
426 Netscape Certificate Management System Administrator’s Guide • June 2003
5.
Type the following line below it:
Enroll.PVKFilename = "<pvk_file_path>"
Your changes should look like this:
...
Enroll.GenKeyFlags = 1 ’ key exportable
Enroll.PVKFilename = "<pvk_file_path>"
szCertReq = Enroll.createPKCS10(szName, "1.3.6.1.5.5.7.3.2")
...
6.
Replace
<pvk_file_path>
with the absolute path, including the filename, to
the directory in which you want the private key file created; for example,
"C:\myKey.PVK"
. Be sure to use the
.PVK
extension and to enclose the path in
double quotes.
7.
Optionally, you may further edit the form to include a text field for entering
the file path.
8.
Save your changes.
9.
Now use the form to issue an object-signing certificate.
If your users need to generate Software Publishing File (SPC) files for their
object-signing certificates, you should ask them to use the Microsoft tool named
cert2spc
. The SPC file enables them to execute commands such as this:
signcode -spc myCert.spc -v myKey.pvk file.exe
Here’s how a user can create a SPC file for an object-signing certificate:
1.
Open a web browser window.
2.
Go to the End Entity Services interface.
3.
Locate the object-signing certificate for which you want to create the SPC file.
4.
Scroll down the page (that shows the certificate information in detail) to find
the certificate in base-64 encoded format. It looks like this:
-----BEGIN CERTIFICATE-----
MIICJzCCAZCgAwIBAgIBAzANBgkqhkiG9w0BAQQFADBCMSAwHgYDVQQKExdOZXRz
Y2FwZSBD
b21tdW5pY2F0aW9uczngjhnMVQ2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTk4MDg
yNzE5MDw
MFoXDTk5MDIyMzE5MDAwMnbjdgngYoxIDAeBgNVBAoTF05ldHNjYXBlIENvbW11b
mljYXRpb
25zMQ8wDQYDVQQLEwZQZW9wbGUxFzAVBgoJkiaJkIsZAEBEwdzdXByaXlhMRcwFQ
YDVQQDw5
TdXByaXlhIFNoZXR0eTEjMCEGCSqGSIb3DbndgJA