Viewing Certificates And Crls Published To File; Configuring The Directory For Ldap Publishing - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

BtoA input_file output_file
12. Convert the base 64-encoded CRL to readable form using the Pretty Print CRL tool.
PrettyPrintCrl input_file [output_file]
13. Compare the output.

15.9. Viewing Certificates and CRLs Published to File

Certificates and CRLs can be published to two types of files: base-64 encoded or DER-encoded. The
content of these files can be viewed by converting the files to pretty-print format using the dumpasn1
tool or the PrettyPrintCert or PrettyPrintCRL tool.
To view the content in a base-64 encoded file, do the following:
1. Convert the base-64 file to binary. For example:
AtoB /tmp/example.b64 /tmp/example.bin
2. Use the PrettyPrintCert or PrettyPrintCRL tool to convert the binary file to pretty-print
format. For example:
PrettyPrintCert example.bin example.cert
Alternatively, the dumpasn1 can be used to convert a binary certificate or CRL to pretty-print
format. The dumpasn1 tool can be downloaded at
repoview/dumpasn1-0-20050404-1.fc4.html.
To view the content of a DER-encoded file, simply run the dumpasn1, PrettyPrintCert, or
PrettyPrintCRL tool with the DER-encoded file. For example:
PrettyPrintCRL example.der example.crl

15.10. Configuring the Directory for LDAP Publishing

Before certificates and CRLs can be published, the Directory Server must be configured to work with
the publishing system.
Section 15.10.1, "Schema"
•
Section 15.10.2, "Entry for the CA"
•
Section 15.10.3, "Bind DN"
•
Section 15.10.4, "Directory Authentication Method"
•
Viewing Certificates and CRLs Published to File
http://fedoraproject.org/extras/4/i386/repodata/
359