Supported Security And Directory Protocols - Red Hat CERTIFICATE SYSTEM 8 - DEPLOYMENT Deployment Manual

Chapter 3. Supported Standards and Protocols
Format or Protocol
Certificate Request Message
Format (CRMF)
Certificate Management
Message Formats (CMMF)
Certificate Management
Messages over CS (CMC)
Cryptographic Message Syntax
(CMS)
PKIX Certificate and CRL
Profile
Table 3.2. PKIX Standards Supported in Certificate System 8.0

3.5. Supported Security and Directory Protocols

The Certificate System supports several common Internet and network protocols.
Protocol
FIPS PUBS 140-1
Hypertext Transport Protocol (HTTP) and
Hypertext Transport Protocol Secure (HTTPS)
KEYGEN tag
46
RFC or Draft
RFC 4211
RFC 5274
RFC 2630
RFC 5280
Description
Federal Information Standards Publications
(FIPS PUBS) 140-1 is a US government
standard for implementing cryptographic
modules such as hardware or software that
encrypts and decrypts data, creates and verifies
digital signatures, and other cryptographic
functions.
Protocols used to communicate with web
servers.
An HTML tag that generates a key pair for use
with a certificate.
Description
A message format to send a
certificate request to a CA.
Message formats to send
certificate requests and
revocation requests from end
entities to a CA and to return
information to end entities.
CMMF has been subsumed by
another standard, CMC.
A general interface to public-
key certification products
based on CS and PKCS
#10, including a certificate
enrollment protocol for RSA-
signed certificates with Diffie-
Hellman public-keys. CMC
incorporates CRMF and CMMF.
A superset of PKCS #7 syntax
used for digital signatures and
encryption.
A standard developed by
the IETF for a public-key
infrastructure for the Internet.
It specifies profiles for
certificates and CRLs. For more
information about certificate
http://
and CRL profiles, see
www.ietf.org/rfc/rfc5280.txt.