Netscape Certificate Management System 6.2, Руководство администратора

Страница: 233 / 874

Configuring Key Archival and Recovery Process
Chapter 6 Data Recovery Manager 233
e.
Open the text file that has the Data Recovery Manager’s transport
certificate (the one you copied earlier) and copy the certificate.
f.
Paste the certificate as the value of the
kraTransportCert
variable.
Paste the certificate in front of the
=
sign, remove any line breaks, enclose
the certificate within double-quotation marks (
“”
), and end the string with
a semicolon (
;
). When deleting line breaks, be sure not to delete any of the
characters in the encoded blob.
An example is shown below:
var kraTransportCert =
”MIICDjCCAXegAwIBAgICAfMwDQYJKoZIhvcNAQEEBQAwdzELMAkGA1UEBhMC
VVMxLDA
qBgNVBAoTI05ldHNjYXBlIENvbW11bmljYXRpb25zIENvcnBvcmF0aW9uMREw
DwYDVQQ
LEwhIYXJkY29yZTEnMCUGA1UEAxMeSGFyZGNvcmUgQ2VydGlmaWNhdGUgU2Vy
dmVyIEl
JMB4XDTk4MTExOTIzNDIxOVoXDTk5MDUxODIzNDIxOVowLjELMAkGA1UEBhMC
VVMxETA
PBgNVBAoTCG5ldHNjYXBlMQwwCgYDVQQDEwNLUmEwXDANBgkqhkiG9w0BAQEF
AANLADB
IAkEArrbDiYUI5SCdlCKKa0bEBn1m83kX6bdhytRYNkdHB95Bp85SR”;
g.
Pass the
kraTransportCert
variable to the JavaScript method.
Replace
null
(the fourth line in the method) with
kraTransportCert
.
h.
Specify the key algorithm and key type (see “
generateCRMFRequest()
” in
Javascript API for Client Certificate Management).
Below is an example that shows how the updated
generateCRMFRequest()
method would look:
// generate keys for PSM.
if (navigator.appName == "Netscape" && (navMajorVersion() > 3) &&
typeof(crypto.version) != "undefined") {
certNickname.value = subject.value;
crmfObject = crypto.generateCRMFRequest(subject.value,
"regToken",
"authenticator",
kraTransportCert,
"setCRMFRequest();",
512, null, "rsa-ex",
1024, null, "rsa-sign");
}