Usage - Red Hat CERTIFICATE SYSTEM 7.2 - COMMAND-LINE TOOLS Manual

Chapter 16. CRMF Pop Request
Option
pop_option
subject_dn
OUTPUT_CERT_REQ

2. Usage

The following example generates a CRMF/POP request for the Certificate System user
has the server verify that the information is correct, and prints the certificate request to the
screen:
CRMFPopClient password123 nullAuthMgr host.redhat.com 1026 admin redhat \
POP_SUCCESS CN=MyTest,C=US,UID=MyUid OUTPUT_CERT_REQ
The following example generates a CRMF/POP request that includes a transport for key
archival in the DRM. The
certificate must be in the same directory from which the utility is launched; the tool picks up this
file automatically.
CRMFPopClient password123 POP_SUCCESS OUTPUT_CERT_REQ
62
file containing the base-64 encoded transport
transport.txt
Description
Optional. Sets the type of POP request to
generate; since this can generate invalid
requests, this option can be used for testing.
There are three values:
• . Generates a request with the
POP_SUCCESS
correct POP information; the server verifies
that the information is correct.
• . Generates a request with
POP_FAIL
incorrect POP information; the server
rejects this request if it is submitted. This is
used to test server configuration.
• . Generates a CRMF request with
POP_NONE
no POP information. If the server is
configured to verify all the POP information,
then it rejects this request. In that case, it
can be used to test the server configuration.
The distinguished name of the requested
certificate.
Optional. Prints the generated certificate
request to the screen.
,
admin