Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 648 / 866

Configuring a Certificate Manager to Publish Certificates and CRLs
648 Netscape Certificate Management System Installation and Setup Guide • October 2001
6.
Click OK.
The Rules Management tab appears, listing the new rule you just created for
publishing end users’ client certificates.
7.
Repeat steps 1 through 6 for each type of end-entity certificate the Certificate
Manager will issue. Use Table 19-2 for filling in the correct values in the
type
and
predicate
fields. (For information on predicates, see “Using Predicates in
Policy Rules” on page 582.)
Step 4. Configure the Certificate Manager to
Publish CRLs
If you don’t want the Certificate Manager to publish CRLs to the directory, skip to
“Step 5. Identify the Publishing Directory” on page 656.
You can configure the Certificate Manager to publish CRLs to the directory that is
currently configured for publishing the CA and end-entity certificates. A
configured Certificate Manager will publish the CRL to the CA’s entry in the
specified directory, replacing the old CRL with the new one; the old CRL is not
saved. The Certificate Manager connects to the directory using the base DN and
password that you will specify in “Step 5. Identify the Publishing Directory” on
page 656.
Table 19-2 Certificate types and predicate expressions
End-entity certificate type “type” field value “predicate” field value
SSL client certificate
certs HTTP_PARAMS.certType==client
SSL server certificate
certs HTTP_PARAMS.certType==server
Object signing certificate
certs HTTP_PARAMS.certType==objSignClient
Certificate Manager signing
certificate (subordinate CA)
cacert HTTP_PARAMS.certType==ca
Registration Manager signing
certificate
certs HTTP_PARAMS.certType==ra
OCSP responder certificate
certs HTTP_PARAMS.certType==ocspResponder
Router certificate
certs HTTP_PARAMS.certType==CEP-Router