Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 159 / 512

Setting up a Redirect for Certificates Issued in Certificate System 7.1 and Earlier
139
<init-param>
<param-name>matchURIStrings</param-name>
<param-value>/ocsp/registry,/ocsp/acl,/ocsp/jobsScheduler,/ocsp/ug,/ocsp/server,/ocsp/log,
/ocsp/auths,/ocsp/start,/ocsp/ocsp,/ocsp/services,/ocsp/agent,/ocsp/ee,
/ocsp/admin</param-value>
</init-param>
<init-param>
<param-name>destServletOnNoMatch</param-name>
<param-value>/ee/ocsp</param-value>
</init-param>
<init-param>
<param-name>appendPathInfoOnNoMatch</param-name>
<param-value>/ocsp</param-value>
</init-param>
</servlet>
<servlet-mapping>
<servlet-name>ocspProxy</servlet-name>
<url-pattern>/ocsp</url-pattern>
</servlet-mapping>
<servlet-mapping>
<servlet-name>ocspOther</servlet-name>
<url-pattern>/ocsp/*</url-pattern>
</servlet-mapping>
</web-app>
12. Edit the
/var/lib/rhpki-ocsp/conf/context.xml
, changing the following line:
<Context>
to
<Context crossContext="true" >
13. Edit the
/var/lib/rhpki-ocsp/webapps/ocsp2/services.template
file and change the
following line:
result.recordSet[i].uri);
to
result.recordSet[i].uri + "/");
14. Start the OCSP instance. For example:
/etc/init.d/rhpki-ocsp start