Table of Contents
Advertisement
Revocation Interface
Function: Allows automatic revocation of certificates by client authentication (an
entity can revoke a certificate it presents).
The response is always a form that indicates the status of the revocation request
(revoked, pending, or error), the result of updating the Certificate Revocation List,
and the result of updating the certificate directory (if publishing is enabled).
Default Forms
The Revocation interface uses the UserRevocation.html form by default. This form
posts requests that use SSL client authentication to present the certificate to be
revoked. The certificate is automatically revoked.
Request Parameters
The following table lists the parameters accepted by the Revocation interface.
Table 3-23 Parameters Accepted by the Revocation Interface
Parameter
certType
csrRequestorComments
csrRequestorEmail
csrRequestorName
csrRequestorPhone
90
Netscape Certificate Management System Customization Guide • May 2002
Format and Description
client
Specifies the type of certificate to revoke. For automatic revocation, the
certType must be client and doSslAuth must be on.
string
Additional comments to assist the agent who will process the revocation
request.
string
Contact email address of someone responsible for the CMS server certificate.
May be used to send out notification when a certificate has been revoked.
Example: alice@example.com
string
Name of someone responsible for the CMS server certificate; helps identify
the requestor during manual revocation.
Example: Alice Apple
string
Phone number of someone responsible for the CMS server certificate.
Example: 650.555.1212
Advertisement
Table of Contents
