Challenge Revocation Interface
> enrollment url https://example:443/
> crypto ca enroll Example
The router uses the CEP protocol and expects to find the
/cgi-bin/pkiclient.exe
command. The details of interacting with the interface are handled by the protocol
itself.
Challenge Revocation Interface
Description
URI:
Available on: Certificate Manager and Registration Manager
Function: Allows an entity to revoke a certificate using a challenge password set
during enrollment.
The Challenge Revocation interface is useful if an entity must revoke a certificate
that is not available or not valid for SSL client authentication. (The Revocation
Interface can be used to present a certificate using SSL client authentication for
revocation.) To use this interface, the challenge password for revocation must be
set during enrollment (see the challengePassword request parameter in
"Enrollment Interface" on page 49).
Default Forms
The
ChallengeRevoke1.html
Revocation interface. It allows an end user to enter either the certificate's serial
number or subject name and the challenge password to revoke the certificate.
Request Parameters
The following table lists the parameters accepted by the Challenge Revocation
interface.
42
Netscape Certificate Management System Customization Guide • March 2002
/challenge_revocation1
interface at the URL named by the
form is the only default form that uses the Challenge
enrollment url