Setting Up a Certificate Manager with OCSP Service
•
Read "Publishing of CRLs" on page 590. Determine whether you want the
Certificate Manager to publish version 1 or version 2 CRLs to the directory. If
you decide to publish version 2 CRLs, read Chapter 4, "Certificate Extension
Plug-in Modules" of CMS Plug-Ins Guide and determine the CRL extensions
you want the Certificate Manager to set; you will be required to configure the
server to set these extensions.
Step 2. Install OCSP-Compliant Client
If you already have an OCSP-compliant client, such as Netscape 6x or Netscape
Communicator version 4.7x with Personal Security Manager, skip to the next step,
"Step 5. Configure Certificate Manager for Required Extension Policies" on
page 700. Otherwise, follow the instructions in this section and set up your browser
to validate certificates using OCSP.
•
Setting Up Netscape 6x for OCSP-Based Certificate Validation
•
Setting Up Personal Security Manager for OCSP-Based Certificate Validation
Setting Up Netscape 6x for OCSP-Based Certificate Validation
If you want to install Netscape 6x, follow these instructions:
Download the latest version of the product from this site:
1.
http://home.netscape.com/browsers/
Install the product following its installation instructions.
2.
Configure the product to verify certificates by using the OCSP service URL
3.
identified by the Authority Information Access extension in certificates:
a.
676
Netscape Certificate Management System Installation and Setup Guide • March 2002
From the Edit menu, select Preferences.
Need help?
Do you have a question about the NETSCAPE MANAGEMENT SYSTEM 6.0 and is the answer not in the manual?