Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Admin Manual

Page: 113 / 564

Creating the Bulk Issuance File
91
There are two parts to performing bulk issuance:
•
Creating the HTML POST file
1
•
Running the bulk issuance command
2
4.5.1. Creating the Bulk Issuance File
Each certificate request has its own entry in the POST file which identifies information that is normally
defined through the profile, like the requester information, some extension settings, the certificate type,
and the certificate request itself (in CRMF format). The parameters for the POST entry are listed in
Table 4.2, “Bulk Issuance POST File Parameters”
.
NOTE
Using the bulk issuance tool goes around the certificate profile framework.
Many of these parameters are optional, so they can be left blank in the file if they are unnecessary.
Parameter Description
Certificate Information
CRMFRequest
Contains the CRMF request blob that is being submitted to the CA.
certType Gives the type of certificate being request, such as an SSL client or server certificate.
submit Sets the operation to take with submitting the certificate. This value should be
Submit
.
subject Gives the subject name for certificate; this should match whatever is in the CRMF request. Any characters not accepted in HTML
(like white spaces) should be replaced with their HTML-coded equivalent, like using
%20
for a space.
certPrettyPrint Sets whether to return a pretty-print format of the certificate; this is either
true
or
false
.
challengePassword and
confirmChallengePassword Sets and confirms a challenge password which is used to verify the requester when the certificate is issued.
Certificate Uses
email
Sets whether the certificate can be used for encrypted email; this is either
true
or
false
.
ssl_client Sets whether this certificate can be used for SSL client authentication; this is either
true
or
false
.
digital_signature Sets whether this certificate can be used for digitally signing files; this is either
true
or
false
.
non_repudiation Sets whether the certificate can be used for non-repudiation; this is either
true
or
false
.
key_encipherment Sets whether the certificate can be used for encipherment; this is either
true
or
false
.
Requester Information
csrRequestorName
Gives the name of the requester.
csrRequestorEmail Gives the contact email for the requester.
csrRequestorPhone Gives the contact phone number for the requester.
csrRequestorComments Adds any special comments from the requester or the administrator about the certificate.
Table 4.2. Bulk Issuance POST File Parameters
The POST file is illustrated in
Example 4.1, “Bulk Issuance POST File”
.
csrRequestorName=John Smith