Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 684 / 866

Configuring Certificate Manager to Publish to Files
684 Netscape Certificate Management System Installation and Setup Guide • October 2001
d.
When the conversion is complete, open the
crl.txt
file in a text editor.
You should see a base-64 encoded CRL similar to this:
-----BEGIN CRL-----
MIIBkjCBAIBATANBgkqhkiG9w0BAQQFADAsMREwDwYDVQQKEwhOZXRzY2FwZTEXMBUGA1UEAxOQ2Vy
dDQwIFRlc3QgQ0EXDTk4MTIxNzIyMzcyNFowgaowIAIBExcNOTgxMjE1MTMxODMyWjAMMAoGA1UdFQ
DCgEBMCACARIXDTk4MTIxNTEzMjA0MlowDDAKBgNVHRUEAwoBAjAgAgERFw05ODEyMTYxMjUxNTRaM
AwwCgYDVR0VBAMKAQEwIAIBEBcNOTgxMjE3MTAzNzI0WjAMMAoGA1UdFQQDCgEDMCACAQoXDTk4MTE
yNTEzMTExOFowDDAKBgNVHRUEAwoBATANBgkqhkiG9w0BAQQFAAOBgQBCN85O0GPTnHfImYPROvoor
x7HyFz2ZsuKsVblTcemsX0MyY0pPrkXgm157JrkxEJ7GBOeogbAS6iFbmJBH5s
tJNnfTCuhaM6Wx63Wc9LwZXOXTPsvpGDPfBZlI3z4lC9NkeMrheEg==
-----END CRL-----
3.
Convert the base 64-encoded CRL to a human-readable form using the Pretty
Print CRL tool (see Chapter 10, “Pretty Print CRL Tool” of CMS Command-Line
Tools Guide).
To convert the base 64-encoded CRL to a human-readable form:
a.
Check the command window to make sure that your are at this directory:
<server_root>/bin/cert/tools
b.
At the prompt, enter this:
PrettyPrintCrl[.bat] <input_file>
[<output_file>]
substituting
<input_file>
with the path to the ASCII file that contains the
CRL in its base 64-encoded format and
<output_file>
with the path to
the file to write the CRL information in a human-readable form. If you
don’t specify an output file, the CRL information is written to the standard
output. (The optional
.bat
specifies the file extension; this is required only
when running the utility on a Windows NT system.)
For example, if the base-64 encoded CRL is in
C:\crls\crl-949102696899.txt
and you want the human-readable form
of the CRL to be displayed on your screen, the command would look like
this:
PrettyPrintCrl.bat C:\crls\crl-949102696899.txt
When the conversion is complete, you should see the CRL (in this case, the
CRL will only contain the certificate you revoked) in the human-readable
form.
c.
Compare the output with the certificate you revoked.
If they match, the Certificate Manager is configured correctly to publish
CRLs to files.