Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Руководство администратора

Страница: 381 / 554

Viewing Certificates and CRLs Published to File
359
BtoA input_file output_file
12. Convert the base 64-encoded CRL to readable form using the Pretty Print CRL tool.
PrettyPrintCrl input_file [output_file]
13. Compare the output.
15.9. Viewing Certificates and CRLs Published to File
Certificates and CRLs can be published to two types of files: base-64 encoded or DER-encoded. The
content of these files can be viewed by converting the files to pretty-print format using the
dumpasn1
tool or the
PrettyPrintCert
or
PrettyPrintCRL
tool.
To view the content in a base-64 encoded file, do the following:
1. Convert the base-64 file to binary. For example:
AtoB /tmp/example.b64 /tmp/example.bin
2. Use the
PrettyPrintCert
or
PrettyPrintCRL
tool to convert the binary file to pretty-print
format. For example:
PrettyPrintCert example.bin example.cert
Alternatively, the
dumpasn1
can be used to convert a binary certificate or CRL to pretty-print
format. The
dumpasn1
tool can be downloaded at
http://fedoraproject.org/extras/4/i386/repodata/
repoview/dumpasn1-0-20050404-1.fc4.html
.
To view the content of a DER-encoded file, simply run the
dumpasn1
,
PrettyPrintCert
, or
PrettyPrintCRL
tool with the DER-encoded file. For example:
PrettyPrintCRL example.der example.crl
15.10. Configuring the Directory for LDAP Publishing
Before certificates and CRLs can be published, the Directory Server must be configured to work with
the publishing system.
•
Section 15.10.1, “Schema”
•
Section 15.10.2, “Entry for the CA”
•
Section 15.10.3, “Bind DN”
•
Section 15.10.4, “Directory Authentication Method”