Red Hat CERTIFICATE 7.3 RELEASE NOTES, Руководство по выпуску

Страница: 12 / 24

Release Notes
12
• /var/lib/
instance_name
/conf/server.xml
• /var/lib/
instance_name
/web-apps.ee/ca/ee/ca/ProfileSelect.template
3. Open the
server.xml
file.
vim -/var/lib/ instance_name /conf/server.xml
4. In the
server.xml
file, change the
clientAuth
directive in the agent connector to
true
.
<Connector name="Agent" port="9443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="true" sslProtocol="SSL"
5. Open the profile selection template.
vim -/var/lib/ instance_name /web-apps.ee/ca/ee/ca/ProfileSelect.template
6. Replace value in the
uri
line with the URL to the agent port. The original line is:
uri = -'profileSubmitSSLClient';
The updated line will look like the following:
uri = -'https://server.example.com:9444/ca/ee/ca/profileSubmitSSLClient';
7. Create a new end-entities web services directory to contain the files for the new URL referenced
in the
ProfileSelect.template
file.
mkdir --p -/var/lib/ instance_name /webapps/ca/ee/ca
cp -/var/lib/ instance_name /webapps.ee/ca/ee/ca/ProfileSubmit.template -/var/
lib/ instance_name /webapps/ca/ee/ca
cp -/var/lib/ instance_name /webapps.ee/ca/ee/ca/ProfileSubmit.html -/var/lib/ instance_name /
webapps/ca/ee/ca/ProfileSubmit.html
chown --R pkiuser: -/var/lib/ instance_name /webapps/ca/ee
8. Restart the CA. For example:
/etc/init.d/rhpki-ca restart
Procedure 2. For the DRM
1. Update the NSS packages by installing the system
nss
packages.
up2date nss