Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 683 / 866

Configuring Certificate Manager to Publish to Files
Chapter 20 Publishing Certificates and CRLs to a File 683
Step F. Check the File for the CRL
Whenever the Certificate Manager generates a CRL, it automatically attempts to
publish the CRL to the configured repository—in this case, the flat file. The CRL it
publishes is a binary blob, in the DER-encoded format. To check whether the
Certificate Manager published the correct CRL (in this case, the CRL contains only
one certificate), you need to do the following:
1.
Check whether the server generated the DER-encoded file containing the CRL.
To check whether the server published the CRL as a binary blob to the
specified directory, go to the directory you specified for the server to publish
CRLs. You should find a file with its name in the
crl-<this_update>.der
format, where
<this_update>
specifies the value derived from the
time-dependent variable named
This Update
of the CRL contained in the file.
If you don’t see the file, check your configuration.
2.
Convert the DER-encoded CRL to its base 64-encoded format using the Binary
to ASCII tool (see Chapter 8, “Binary to ASCII Tool” of CMS Command-Line
Tools Guide).
To convert the DER-encoded CRL to its base 64-encoded form:
a.
Open a command window.
b.
Go to this directory:
<server_root>/bin/cert/tools
c.
At the prompt, enter this:
BtoA[.bat] <input_file> <output_file>
substituting
<input_file>
with the path to the file that contains the
DER-encoded CRL and
<output_file>
with the path to the file to write
the base-64 encoded CRL. (The optional
.bat
specifies the file extension;
this is required only when running the utility on a Windows NT system.)
For example, if the DER-encoded file is in
C:\crls\crl-949102696899.der
and you want the base-64 encoded CRL
to be in
C:\crls\crl-949102696899.txt
, the command would look like
this:
BtoA C:\crls\crl-949102696899.der
C:\crls\crl-949102696899.txt