Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 727 / 866

Setting Up a Remote OCSP Responder
Chapter 21 Setting Up an OCSP Responder 727
notFoundAsGood. A certificate’s status can typically be indicated by three
possible OCSP responses, namely GOOD, REVOKED, and UNKNOWN.
Select this option if you want the Online Certificate Status Manager to
return an OCSP response of GOOD if the certificate in question cannot be
found in the certificate repository. If you deselect the option, the response
will be UNKNOWN, which when encountered by Netscape Personal
Security Manager (an OCSP-compliant client) results in an error message.
includeNextUpdate. The Online Certificate Status Manager can include
the time stamp of next CRL update—a future update time for the CRL or
the revocation information—in the OCSP response that it sends to
OCSP-compliant clients. (According to the OCSP protocol, it is optional to
include the time stamp of next CRL update in an OCSP response.) Select
this option if you want the OCSP response to contain information about
the next CRL update. Leave the option deselected if you don’t want the
OCSP response to contain this information.
6.
Click OK.
You’re returned to the Revocation Store Info Management tab
7.
Click Refresh.
Step 7. Restart the Certificate Manager
For all your changes to take effect, you must restart the Certificate Manager. You
can use the CMS window to restart the Certificate Manager. To restart Certificate
Manager from the CMS window:
1.
Select the Tasks tab.
2.
Click Restart the Server.
When you restart the Certificate Manager, you are prompted to supply the
single sign-on password for the server.
3.
Type the single sign-on password you specified during installation and click
OK. The Certificate Manager won’t restart until you provide this password.
For more information, see “Required Start-up Information” on page 312.