Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Руководство администратора

Страница: 220 / 564

Chapter 7. Using the Online Certificate Status Protocol Responder
198
Certificate Manager or do not contain the Authority Information Access extension, then
this configuration is not necessary.
1. Stop the OCSP Responder. For example:
service pki-ocsp stop
2. Open the OCSP's end user web applications directory. For example:
cd /var/lib/pki-ocsp/webapps
3. Open the
ROOT/WEB-INF/
directory in the
ROOT
folder of the OCSP's web applications directory.
For example:
cd /var/lib/pki-ocsp/webapps/ROOT/WEB-INF/
4. Create and open the
lib/
directory in the
ROOT
folder of the OCSP's web applications directory.
For example:
mkdir lib
cd lib/
5. Create a symlink that links back to the
/usr/share/java/pki/cms.jar
JAR file. For example:
ln -s /usr/share/java/pki/cms.jar cms.jar
6. Move up to the main web application directory. For example:
cd /var/lib/pki-ocsp/webapps/
7. Rename the current instance (
ocsp
) directory. For example:
mv /var/lib/pki-ocsp/webapps/ocsp /var/lib/pki-ocsp/webapps/ocsp2
8. Open the
WEB-INF/
directory in the original
ocsp/
directory. For example:
cd /var/lib/pki-ocsp/webapps/ocsp/WEB-INF
9. In original
ocsp/WEB-INF/
directory, edit the
web.xml
file and add lines mapping between the
eeocspAddCRL
and
csadmin-wizard
servlets.
<servlet-mapping>
<servlet-name> ocspOCSP </servlet-name>
<url-pattern> /ee/ocsp/* </url-pattern>
</servlet-mapping>
10. Create and install the
web.xml
file in the
ROOT
directory. For example:
<?xml version="1.0" encoding="ISO-8859-1"?>