Supported Pkix Formats And Protocols - Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT Deployment Manual

Hide thumbs Also See for CERTIFICATE SYSTEM 8 - DEPLOYMENT:
Table of Contents

Advertisement

• Operations performed with Certificate System tools, including the Subject Alt Name Extension tool,
HttpClient, and the Bulk Issuance Tool
• Client communications, including both the pkiconsole and IPv6-enabled browsers for web
services
• Certificate request names and certificate subject names, including user, server, and router
certificates
• Publishing
• Connecting to LDAP databases for internal databases and authentication directories
Any time a hostname or URL is referenced, an IP address can be used:
• An IPv4 address must be in the format n.n.n.n or n.n.n.n,m.m.m.m. For example, 128.21.39.40 or
128.21.39.40,255.255.255.00.
• An IPv6 address uses a 128-bit namespace, with the IPv6 address separated by
colons and the netmask separated by periods. For example, 0:0:0:0:0:0:13.1.68.3,
FF01::43, 0:0:0:0:0:0:13.1.68.3,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:255.255.255.0, and
FF01::43,FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FF00:0000.
If DNS is properly configured, then an IPv4 or IPv6 address can be used to connect to the web
services pages and to the subsystem Java consoles. The most common method is to use fully-
qualified domain names:
https://ipv6host.example.com:9445/ca/services
pkiconsole https://ipv6host.example.com:9445/ca
To use IPv6 numeric addresses, then replace the fully-qualified domain name in the URL with the IPv6
address, enclosed in brackets ([]). For example:
https://[00:00:00:00:123:456:789:00:]:9445/ca/services
pkiconsole https://[00:00:00:00:123:456:789:00:]:9445/ca

3.4. Supported PKIX Formats and Protocols

The Certificate System supports many of the protocols and formats defined in Public-Key
Infrastructure (X.509) by the IETF. Along with the PKIX standards listed here, other PKIX-listed
standards are available at
Drafts section.
Format or Protocol
X.509 version 1 and version 3
3
http://www.ietf.org/html.charters/pkix-charter.html
http://www.ietf.org/html.charters/pkix-charter.html
RFC or Draft
Supported PKIX Formats and Protocols
3
under the Internet
Description
Digital certificate
formats recommended
by the International
Telecommunications Union
(ITU).
45

Advertisement

Table of Contents
loading

Table of Contents