Table of Contents
Advertisement
Key Recovery Query Interface
Function: Retrieves a set of archived keys, for the purpose of recovering them,
based on a flexible query specification.
The Key Recovery Query interface allows you to build query criteria much like an
LDAP query. Criteria can be combined using logical AND or OR for flexibility. You
can match keys in the archive based on the DRM serial number, the DN of the key
owner, the certificate containing the corresponding public key, or the agent that
archived the key.
The interface returns the public keys corresponding to the archived keys that
match the query criteria. The list of keys in the response will each have a "Recover"
button that allows the key to be recovered.
Default Forms
The Data Recovery Manager form
interface. The form allows the agent to specify any of the valid query parameters:
serial number range, key owner DN, public key certificate, or user ID of the
archiving agent.
Request Parameters
The following table lists the parameters accepted by the Key Recovery Query
interface.
The
queryFilter
query parameters are too complex to describe in the parameter table. The
parameter is identical to the
Interface; refer to "Key Query Interface" on page 128 for complete details on
building queries.
Table 6-21 Parameters Accepted by the Key Recovery Query Interface
Parameter
maxCount
op
134
Netscape Certificate Management System Customization Guide • March 2002
parameter must be a valid query filter. The syntax and valid
queryFilter
Format and Description
number
Specifies the maximum number of keys to display on each page returned. If
more than maxCount keys match the search criteria, each page will have
controls to see the next or previous page of results.
queryKey
The only operation supported by the List Certificates interface is queryKey.
uses the Key Recovery Query
recoverKey.html
request parameter for the Key Query
Advertisement
Table of Contents
