Certserver.ocsp.cas; Certserver.ocsp.certificate; Certserver.ocsp.configuration; Certserver.ocsp.crl - Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION Admin Manual

D.5.5. certServer.ocsp.cas
Controls who can list, in the agent services interface, all of the Certificate Managers which publish
CRLs to the Online Certificate Status Manager. The default setting is:
allow (list) group="Online Certificate Status Manager Agents"
Operations Description
list Lists all of the Certificate Managers which publish CRLs to the OCSP responder.
Table D.70. certServer.ocsp.cas ACL Summary
D.5.6. certServer.ocsp.certificate
Controls who can validate the status of a certificate. The default setting is:
allow (validate) group="Online Certificate Status Manager Agents"
Operations Description
validate Verifies the status of a specified certificate.
Table D.71. certServer.ocsp.certificate ACL Summary
D.5.7. certServer.ocsp.configuration
Controls who can access, view, or modify the configuration for the Certificate Manager's OCSP
services. The default configuration is:
allow (read) group="Administrators" || group="Certificate Manager Agents" ||
group="Registration Manager Agents" || group="Data Recovery Manager Agents" || group="Online
Certificate Status Manager Agents" || group="Auditors";allow (modify) group="Administrators"
Operations Description
read View CRL plug-in information, general CA configuration, CA connector configuration, CRL issuing
notification configuration, revocation notification configuration, request in queue notification configu
extensions configuration and CRL issuing points configuration.
modify Add and delete CRL issuing points. Modify general CA settings, CA connector configuration, CRL
request notification configuration, revocation notification configuration, request in queue notificatio
Table D.72. certServer.ocsp.configuration ACL Summary
D.5.8. certServer.ocsp.crl
Controls access to read or update CRLs through the agent services interface. The default setting is:
allow (add) group="Online Certificate Status Manager Agents"

certServer.ocsp.cas

517