Netscape NETSCAPE MANAGEMENT SYSTEM 4.5, Инструкция по установке и настройке

Страница: 733 / 866

Setting Up a Remote OCSP Responder
Chapter 21 Setting Up an OCSP Responder 733
Step H. Revoke the Certificate
To revoke the certificate you issued so that the Certificate Manager publishes the
CRL to the Online Certificate Status Manager:
1.
Go to the end-entity interface for the Certificate Manager you configured (or to
the Registration Manager that’s connected to this Certificate Manager). Be sure
to go to the HTTPS interface. The URL is in this form:
https://<hostname>:<end_entity_HTTPS_port>
2.
Select the Revocation tab.
3.
In the left frame, click User Certificate.
The User Certificate Revocation form appears.
4.
In the Revocation Reason section, select Unspecified and click Submit.
The client shows the “Select a Certificate” dialog box and prompts you to
choose the certificate you want to revoke.
5.
Select the certificate you downloaded and click OK.
The Certificate Manager revokes the certificate, constructs the CRL, and
publishes the CRL to the Online Certificate Status Manager.
Step I. Verify the Certificate in the Browser
To verify that the certificate has been revoked:
1.
Open the Netscape Personal Security Manager interface.
2.
Select the Certificates tab and then click Mine.
3.
Select the certificate you revoked and click View.
In the View Security Certificate dialog box that appears, look for a message
that says that the certificate could not be verified.
Step J. Check the Online Certificate Status Manager Status Again
You check the Online Certificate Status Manager status again to verify that these
things happened:
• The Certificate Manager published the CRL (the revoked certificate) to the
Online Certificate Status Manager.
• The browser sent an OCSP response to the Online Certificate Status Manager
(this response was initiated when you clicked the View button).