Step 4. Configure The Certificate Manager To Publish Crls - Netscape MANAGEMENT SYSTEM 6.01 Installation And Setup Manual

Configuring a Certificate Manager to Publish Certificates and CRLs
Click OK.
6.
The Rules Management tab appears, listing the new rule you just created for
publishing end users' client certificates.
Repeat steps 1 through 6 for each type of end-entity certificate the Certificate
7.
Manager will issue. Use Table 19-2 for filling in the correct values in the
and
Policy Rules" on page 562.)
Table 19-2 Certificate types and predicate expressions
End-entity certificate type
SSL client certificate
SSL server certificate
Object signing certificate
Certificate Manager signing
certificate (subordinate CA)
Registration Manager signing
certificate
OCSP responder certificate
Router certificate
Step 4. Configure the Certificate Manager to
Publish CRLs
If you don't want the Certificate Manager to publish CRLs to the directory, skip to
"Step 5. Identify the Publishing Directory" on page 636.
You can configure the Certificate Manager to publish CRLs to the directory that is
currently configured for publishing the CA and end-entity certificates. A
configured Certificate Manager will publish the CRL to the CA's entry in the
specified directory, replacing the old CRL with the new one; the old CRL is not
saved. The Certificate Manager connects to the directory using the base DN and
password that you will specify in "Step 5. Identify the Publishing Directory" on
page 636.
628 Netscape Certificate Management System Installation and Setup Guide • May 2002
fields. (For information on predicates, see "Using Predicates in
predicate
"type" field value
certs
certs
certs
cacert
certs
certs
certs
"predicate" field value
HTTP_PARAMS.certType==client
HTTP_PARAMS.certType==server
HTTP_PARAMS.certType==objSignClient
HTTP_PARAMS.certType==ca
HTTP_PARAMS.certType==ra
HTTP_PARAMS.certType==ocspResponder
HTTP_PARAMS.certType==CEP-Router
type