Configuring The Directory For Ldap Publishing - Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

c.
Revoke the Certificate.
7.
Check the File for the CRL
8.
Check whether the server generated the DER-encoded file containing the CRL.
9.
To check whether the server published the CRL as a binary blob to the
specified directory, go to the directory you specified for the server to publish
CRLs. You should find a file with its name in the
format, where
time-dependent variable named
If you don't see the file, check your configuration.
Convert the DER-encoded CRL to its base 64-encoded format using the Binary
10.
to ASCII tool. See step 5 for directions.
Convert the base 64-encoded CRL to a human-readable form using the Pretty
11.
Print CRL tool. See step 6 for directions.
Repeat this test for each kind of certificate or CRL you are issuing. Remember
12.
to check for the published certificate or CRL in all the places you set up
publishing for the certificate or CRL.

Configuring the Directory for LDAP Publishing

Before you can use a directory for publishing of certificates and CRLs, you must
configure that directory to work correctly with your publishing system. The
following sections detail what you will need to configure:
• Schema
• Entry for the CA
• Bind DN
• Directory Authentication Method
Compare the output with the certificate you issued; be sure to check the
serial number in the certificate with the one used in the filename.
If everything matches, the Certificate Manager is configured correctly to
publish certificates to files.
<this_update>
Configuring the Directory for LDAP Publishing
crl-<this_update>.der
specifies the value derived from the
of the CRL contained in the file.
This Update
Chapter 15 Publishing 657