Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 713 / 866

Setting Up a Remote OCSP Responder
Chapter 21 Setting Up an OCSP Responder 713
4.
In the resulting form, paste the encoded CA signing certificate inside the text
area labeled “Base 64 encoded certificate (including header and footer).”
5.
Click Add.
The certificate is added to the internal database of the Online Certificate Status
Manager.
6.
To verify that the certificate is added successfully, in the left frame, click List
Certificate Authorities.
The resulting form should show information about the Certificate Manager
(CA) you just added. Note the values assigned to the “This Update,” “Next
Update,” and “Requests Served Since Startup” fields. All three fields should
show a value of zero (0).
Keep the web browser window open. You’ll need to use the same form later for
verifying that the Certificate Manager can communicate with the Online
Certificate Status Manager.
Step 4. Configure the Certificate Manager to
Publish CRLs
In this step, you configure the Certificate Manager to publish CRLs to the Online
Certificate Status Manager. Note that a configured Certificate Manager will publish
the CRL to the Online Certificate Status Manager, replacing the old CRL with the
new one; the old CRL is not saved.
To configure a Certificate Manager to publish CRLs to the directory, follow these
steps:
• Step A. Specify CRL Format and Publishing Interval
• Step B. Set the CRL Extensions
• Step C. Create a Publisher for the CRL
• Step D. Create a Publishing Rule for the CRL
• Step E. Make Sure Publishing is Enabled
Step A. Specify CRL Format and Publishing Interval
You can specify information, such as the publishing interval, the CRL version
(whether to include CRL extensions), and the signing algorithm the Certificate
Manager should use for signing the CRL object.