Netscape MANAGEMENT SYSTEM 6.0 - COMMAND-LINE Manual page 105

Generating Test Object-Signing Certificates
Warning
If you intend to install the new key pair and certificate in the Communicator
databases, you must exit Communicator before using Netscape Signing Tool to
generate the object-signing certificate. Otherwise, you risk corrupting your
certificate and key databases.
Certificates contain standard information about the entity they identify, such as the
common name and organization name. Netscape Signing Tool prompts you for
option. However, all of
this information when you run the command with the
-G
the requested fields are optional for test certificates. If you do not enter a common
name, the tool provides a default name. In the following example, the user input is
in boldface:
% signtool -G MyTestCert
using certificate directory: /u/someuser/.netscape
Enter certificate information. All fields are optional. Acceptable
characters are numbers, letters, spaces, and apostrophes.
certificate common name: Test Object Signing Certificate
organization: Netscape Communications Corp.
organization unit: Server Products Division
state or province: California
country (must be exactly 2 characters): US
username: someuser
email address: someuser@netscape.com
Enter Password or Pin for "Communicator Certificate DB": [ Password
will not echo ]
generated public/private key pair
certificate request generated
certificate has been signed
certificate "MyTestCert" added to database
Exported certificate to x509.raw and x509.cacert.
%
The certificate information is read from standard input. Therefore, the information
can be read from a file using the redirection operator ( ) in some operating
<
systems. To create a file for this purpose, enter each of the seven input fields, in
order, on a separate line. Make sure there is a newline character at the end of the
last line. Then run with standard input redirected from your file as
signtool
follows:
% signtool -G MyTestCert <inputfile
The prompts show up on the screen, but the responses will be automatically read
from the file. The password will still be read from the console unless you use the
-p
option to give the password on the command line.
Chapter 13 Netscape Signing Tool 105