Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 616 / 866

Configuring a Certificate Manager to Publish Certificates and CRLs
616 Netscape Certificate Management System Installation and Setup Guide • October 2001
To configure a Certificate Manager to publish certificates and CRLs to a directory,
follow these steps:
• Step 1. Before You Begin
• Step 2. Set Up the Directory for Publishing
• Step 3. Configure the Certificate Manager to Publish Certificates
• Step 4. Configure the Certificate Manager to Publish CRLs
• Step 5. Identify the Publishing Directory
• Step 6. Test Certificate and CRL Publishing (optional)
Step 1. Before You Begin
Before configuring a Certificate Manager to publish its CA certificate, end-entity
certificates, and CRLs to a directory, do this:
• Read “Publishing of Certificates to a Directory” on page 605 and “Publishing
of CRLs to an LDAP Directory” on page 614 to understand how the Certificate
Manager publishes certificates and CRLs to the directory.
• Read Chapter 5, “Mapper Plug-in Modules” and Chapter 6, “Publisher Plug-in
Modules” of CMS Plug-ins Guide. Be sure to take a look at the default mappers
and publishers created during CMS installation and determine whether they
are suitable for your setup. If they’re unsuitable, decide on the mapper and
publisher modules you want to use.
• If you decided to not use the default mappers created using the
LdapCaSimpleMap
module, you will be required to manually create an entry
for the CA in the publishing directory. (This document explains how to create
an entry for the CA in Netscape Directory Server, version 4.x only.)
• Read “Publishing of CRLs” on page 610. Determine whether you want the
Certificate Manager to publish version 1 or version 2 CRLs to the directory. If
you decide to publish version 2 CRLs, read Chapter 4, “Certificate Extension
Plug-in Modules” of CMS Plug-ins Guide and determine the CRL extensions
you want the Certificate Manager to set; you will be required to configure the
server to set these extensions.