Netscape Certificate Management System 6.1, Руководство администратора

Страница: 657 / 840

Configuring the Directory for LDAP Publishing
Chapter 15 Publishing 657
c.
Compare the output with the certificate you issued; be sure to check the
serial number in the certificate with the one used in the filename.
If everything matches, the Certificate Manager is configured correctly to
publish certificates to files.
7.
Revoke the Certificate.
8.
Check the File for the CRL
9.
Check whether the server generated the DER-encoded file containing the CRL.
To check whether the server published the CRL as a binary blob to the
specified directory, go to the directory you specified for the server to publish
CRLs. You should find a file with its name in the
crl-<this_update>.der
format, where
<this_update>
specifies the value derived from the
time-dependent variable named
This Update
of the CRL contained in the file.
If you don’t see the file, check your configuration.
10.
Convert the DER-encoded CRL to its base 64-encoded format using the Binary
to ASCII tool. See step 5 for directions.
11.
Convert the base 64-encoded CRL to a human-readable form using the Pretty
Print CRL tool. See step 6 for directions.
12.
Repeat this test for each kind of certificate or CRL you are issuing. Remember
to check for the published certificate or CRL in all the places you set up
publishing for the certificate or CRL.
Configuring the Directory for LDAP Publishing
Before you can use a directory for publishing of certificates and CRLs, you must
configure that directory to work correctly with your publishing system. The
following sections detail what you will need to configure:
• Schema
• Entry for the CA
• Bind DN
• Directory Authentication Method