Table of Contents
Advertisement
Mappers
OCSPPublisher
The
OCSPPublisher
Manager to publish its CRLs to an Online Certificate Status Manager.
During installation, the Certificate Manager does not create any instances of the
OCSPPublisher
Table 15-7 OCSPPublisher Parameters
Parameter
host
port
path
Mappers
Mappers are only used with LDAP publishing. Mappers allow you to define a
relationship between a certificates subject name and the DN of the directory entry
in which the certificate is published. The Certificate Manager needs to derive the
DN of the entry from the certificate or the certificate request so it knows in which
directory entry to publish the certificate or CRL. The mapper allows you to define a
relationship between the DN for the user entry and the subject name of the
certificate, or some other input information. This relationship can either be one in
which the exact DN of the entry can be derived from the information using the
mapper to derive this DN, or one in which the information can be used to search
the directory and find the DN of the entry using the mapper to derive the search
criteria.
Configuring Mappers
During installation, the Certificate Manager automatically creates a set of mappers
defining the most common relationships. The default mappers are as follows:
•
LdapUserCertMap
directory in order to publish user certificates.
634
Netscape Certificate Management System Administrator's Guide • February 2003
plug-in module enables you to configure a Certificate
module.
Description
Specifies the fully qualified hostname of the Online Certificate
Status Manager.
Specifies the port number on which the Online Certificate Status
Manager is listening to the Certificate Manager, this is the Online
Certificate Status Manager's end-entity SSL port number.
Specifies the path for publishing the CRL. Must be the default
path, /ocsp/addCRL.
—for locating the correct attribute of user entries in the
Advertisement
Table of Contents
