Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Installation And Setup Manual

Page: 726 / 866

Setting Up a Remote OCSP Responder
726 Netscape Certificate Management System Installation and Setup Guide • October 2001
❍
If you selected
ldapStore
, fill in values as below:
numConns. Type the total number of LDAP directories the Online
Certificate Status Manager should check. By default, this is set to 0. If you
change the value to a postive integer, for example 1, 2, or 3, you will see
that many sets of
host
,
port
,
baseDN
, and
refreshInSec
fields. (Change
the value, click OK, and reopen the window to see the updated fields.)
host<n>. Type the fully-qualified hostname of the LDAP directory. The
name must be in the
<machine_name>.<your_domain>.<domain>
form.
For example,
corpDir1.siroe.com
.
port<n>. Type the nonSSL port of the LDAP directory. For example, 389.
baseDN<n>. Type the DN to start searching for the CRL. For example,
O=siroe.com
.
refreshInSec<n>. Type how often the connection be refreshed. The default
is 86400 seconds (that is, refresh every day).
caCertAttr. Leave the default value,
cACertificate;binary
, as it is. (It’s
the attribute to which the Certificate Manager publishes its CA signing
certificate.)
crlAttr. Leave the default value,
certificateRevocationList;binary
, as
it is. (It’s the attribute to which the Certificate Manager publishes CRLs.)