Identifying A Ca To The Ocsp - Red Hat CERTIFICATE SYSTEM 7.3 - AGENT GUIDE Manual

Hide thumbs Also See for CERTIFICATE SYSTEM 7.3 - AGENT GUIDE:

Table of Contents

Chapter 8. OCSP: Agent Services

Figure 8.1. OCSP List Certificate Authorities Page

8.2. Identifying a CA to the OCSP

The OCSP can be configured to receive CRLs from multiple CMs. Before configuring a CM to publish

CRLs to the OCSP, first identify the CM to the OCSP by storing the CM's CA signing certificate in the

internal database of the OCSP.

To store the CM's CA signing certificate in the internal database of the OCSP, do the following:

1. Open the CM's end entities page.

https://server.example.com:9443/ca/agent/ca

2. Select the Retrieval tab, and, in the left frame, click List Certificates.

3. When the page opens, click Find.

4. Locate the CM's CA signing certificate by looking at the subject name of the certificate. Typically,

the CA signing certificate is the first certificate the CM issues.

5. Click on the subject name.

6. In the certificate contents page, scroll to the Base 64 encoded certificate section, which shows the

CA signing certificate in its base-64 encoded format.

7. Copy the base-64-encoded certificate, including the -----BEGIN CERTIFICATE----- and -

----END CERTIFICATE----- marker lines, to the clipboard or a text file. The certificate informa-

tion looks similar to this example:

-----BEGIN CERTIFICATE-----

MIIB/DCCAaagAwIBAgIBATANBgkqhkiG9w0BAQUFADBRMRwwGgYDVQQKExNTZmJh

eSBSZWRoYXQgRG9tYWluMREwDwYDVQQLEwgxMDI3cm9vdDEeMBwGA1UEAxMVQ2Vy

dGlmaWNhdGUgQXV0aG9yaXR5MB4XDTA2MTAyNzE2MTkyM1oXDTA4MTAxNjE2MTky

M1owUTEcMBoGA1UEChMTU2ZiYXkgUmVkaGF0IERvbWFpbjERMA8GA1UECxMIMTAy

N3Jvb3QxHjAcBgNVBAMTFUNlcnRpZmljYXRlIEF1dGhvcml0eTBcMA0GCSqGSIb3

DQEBAQUAA0sAMEgCQQDXA7qzGv1LJNxEvlHkDKvLjr+OgHmhj4BaPAXTVw64szgT

McQh1aY0G4plpTdCwECEiMb3JRa8QzpfRwbB/kFpAgMBAAGjaTBnMA8GA1UdEwEB

/wQFMAMBAf8wDgYDVR0PAQH/BAQDAgHGMEQGCCsGAQUFBwEBBDgwNjA0BggrBgEF

BQcwAYYoaHR0cDovL3Bhdy5zZmJheS5yZWRoYXQuY29tOjkwODAvY2Evb2NzcDAN

BgkqhkiG9w0BAQUFAANBAIOhIcmHQ4HHSPQielUVx0EoiseeXL/t8VrAnK0i2uMn

7eZlvLIXrcQAcQTI4yxavKtOtkqrPR6uV5LhCqaX2hg=

-----END CERTIFICATE-----

Table of Contents

Do you have a question about the CERTIFICATE SYSTEM 7.3 - AGENT GUIDE and is the answer not in the manual?