Red Hat CERTIFICATE SYSTEM 7.3 - RELEASE NOTES Release Note page 12

Release Notes
• /var/lib/instance_name/conf/server.xml
• /var/lib/instance_name/web-apps.ee/ca/ee/ca/ProfileSelect.template
3. Open the server.xml file.
vim -/var/lib/instance_name/conf/server.xml
4. In the server.xml file, change the clientAuth directive in the agent connector to true.
<Connector name="Agent" port="9443" maxHttpHeaderSize="8192"
maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
enableLookups="false" disableUploadTimeout="true"
acceptCount="100" scheme="https" secure="true"
clientAuth="true" sslProtocol="SSL"
5. Open the profile selection template.
vim -/var/lib/instance_name/web-apps.ee/ca/ee/ca/ProfileSelect.template
6. Replace value in the uri line with the URL to the agent port. The original line is:
uri = -'profileSubmitSSLClient';
The updated line will look like the following:
uri = -'https://server.example.com:9444/ca/ee/ca/profileSubmitSSLClient';
7. Create a new end-entities web services directory to contain the files for the new URL referenced
in the ProfileSelect.template file.
mkdir --p -/var/lib/instance_name/webapps/ca/ee/ca
cp -/var/lib/instance_name/webapps.ee/ca/ee/ca/ProfileSubmit.template -/var/
lib/instance_name/webapps/ca/ee/ca
cp -/var/lib/instance_name/webapps.ee/ca/ee/ca/ProfileSubmit.html -/var/lib/instance_name/
webapps/ca/ee/ca/ProfileSubmit.html
chown --R pkiuser: -/var/lib/instance_name/webapps/ca/ee
8. Restart the CA. For example:
/etc/init.d/rhpki-ca restart
Procedure 2. For the DRM
1. Update the NSS packages by installing the system nss packages.
up2date nss
12