17.2.8 Exporting CA Objects as a File
If you have set up a repository on the computer for administering CAs, you can use this
option to create the CA objects directly as a file at the correct location. Different output
formats are available, such as PEM, DER, and PKCS12. In the case of PEM, it is also
possible to choose whether a certificate should be exported with or without key and
whether the key should be encrypted. In the case of PKCS12, it is also possible to export
the certification path.
Export a file in the same way for certificates, CAs as with LDAP, described in
Sec-
tion 17.2.7, “Exporting CA Objects to LDAP”
(page 210), except you should select
Export as File instead of Export to LDAP. This then takes you to a dialog for selecting
the required output format and entering the password and filename. The certificate is
stored at the required location after clicking OK.
For CRLs click Export, select Export to file, choose the export format (PEM or DER)
and enter the path. Proceed with OK to save it to the respective location.
TIP
You can select any storage location in the file system. This option can also be
used to save CA objects on a transport medium, such as a USB stick. The
/media
directory generally holds any type of drive except the hard drive of
your system.
17.2.9 Importing Common Server
Certificates
If you have exported a server certificate with YaST to your media on an isolated CA
management computer, you can import this certificate on a server as a common server
certificate. Do this during installation or at a later point with YaST.
NOTE
You need one of the PKCS12 formats to import your certificate successfully.
212
Security Guide
Summary of Contents for LINUX ENTERPRISE DESKTOP 11
Page 1: ...SUSE Linux Enterprise Server www novell com 11 March 17 2009 Security Guide...
Page 9: ...32 7 Managing Audit Event Records Using Keys 433 33 Useful Resources 435...
Page 10: ......
Page 29: ...Part I Authentication...
Page 30: ......
Page 55: ...Figure 4 2 YaST LDAP Server Configuration LDAP A Directory Service 41...
Page 126: ......
Page 127: ...Part II Local Security...
Page 128: ......
Page 158: ......
Page 173: ...Part III Network Security...
Page 174: ......
Page 194: ......
Page 197: ...Figure 16 2 Scenario 2 Figure 16 3 Scenario 3 Configuring VPN Server 183...
Page 210: ......
Page 228: ......
Page 229: ...Part IV Confining Privileges with Novell AppArmor...
Page 230: ......
Page 274: ......
Page 300: ......
Page 328: ......
Page 340: ......
Page 342: ......
Page 386: ......
Page 387: ...Part V The Linux Audit Framework...
Page 388: ......