Step 10. Test Your Ocsp Responder Setup; Step A. Turn On Revocation Checking - Netscape MANAGEMENT SYSTEM 4.5 Installation And Setup Manual
Hide thumbs
Also See for NETSCAPE MANAGEMENT SYSTEM 4.5:
Table of Contents
Advertisement
The "Requests Served Since Startup" field should show a value of zero (0),
indicating that no OCSP-compliant client has queried the Online
Certificate Status Manager yet for revocation status of a certificate.
Step 10. Test Your OCSP Responder Setup
To test whether the Certificate Manager is publishing to the Online Certificate
Status Manager properly and to test that the online validation of certificates is
taking place, follow these steps:
•
Step A. Turn On Revocation Checking
•
Step B. Request a Certificate
•
Step C. Approve the Request
•
Step D. Download the Certificate to the Browser
•
Step E. Make Sure the CA is Trusted by the Browser
•
Step F. Verify the Certificate in the Browser
•
Step G. Check the Status of Online Certificate Status Manager
•
Step H. Revoke the Certificate
•
Step I. Verify the Certificate in the Browser
•
Step J. Check the Online Certificate Status Manager Status Again
Step A. Turn On Revocation Checking
To ensure that Personal Security Manager (the OCSP-compliant client) is
configured to verify the revocation status of certificates using the OCSP protocol:
Open a web browser window.
1.
Open the Personal Security Manager interface.
2.
In Communicator version 4.7, you can open this window by clicking the
Security button in the navigation bar. Alternatively, you can also open this
window by selecting Communicator from the main menu, selecting Tools, and
then selecting Security Info.
Select the Advanced tab, and then in left pane, select Options.
3.
Click the OCSP Settings button.
4.
The OCSP Setting window appears.
Setting Up a Remote OCSP Responder
Chapter 21
Setting Up an OCSP Responder
729
Advertisement
Table of Contents
