Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 573 / 840

CMCRevocation
Chapter 15 Revocation and CRLs 573
where
Note: Surround values that include spaces in quotation marks.
Testing CMC Revoke
1.
Go to the following directory:
<server_root>/bin/cert/tools
2.
Create a CMC revocation request for a certificate that exists.
.\CMCRevoke -d<dir to cert8.db, key3.db> -n<nickname>
-i<issuerName> -s<serialName> -m<reason to revoke> -c<comment>
For example, if the directory containing the agent certificate is
.redhat
, the nickname
of the certificate is
RegistartionManagerAgentCert
, and the serial number of the
certificate is
22
, the command would look like this:
-d
The directory where
cert8.db
,
key3.db
, and
secmod.db
containing the
agent certificate are located.
-n
The nickname of the agent’s certificate.
-
i
The issuer name of the certificate being revoked.
-s
The serial number of the certificate being revoked in decimal value.
-m
The reason the certificate is being revoked. Specify the reason code by
providing the number associated with the revocation reason from the
following:
0
= Unspecified
1
= Key compromised
2
= CA key compromised
3
= Affiliation changed
4
= Certificate superseded
5
= Cessation of operation
6
= Certificate is on hold
-c
Include any comments about the request.