Netscape MANAGEMENT SYSTEM 6.2 - ADMINISTRATOR Administrator's Manual page 196

Testing Your OCSP Setup
Check the Status of Online Certificate Status Manager (stand-alone OCSP
7.
service).
Go to the agent services interface for the Online Certificate Status Manager and
then go to the List Certificate Authorities page found in the left frame.
The resulting form should show information about the Certificate Manager
(CA) you configured to publish CRls to the Online Certificate Status Manager.
The page also summarizes the Online Certificate Status Manager's activity
since it was last started.
Revoke the certificate
8.
Verify the certificate in the browser or client. Once verified, you should see that
9.
the certificate has been revoked.
Check the Certificate Manager's OCSP Service Status (internal OCSP) again
10.
Check the Certificate Manager's OCSP-service status again to verify that these
things happened:
Check the Online Certificate Status Manager Status (stand-along OCSP service)
11.
Again
Check the Online Certificate Status Manager status again to verify that these
things happened:
The browser used that response to validate the certificate and informed you of its
status (that the certificate could not be verified)
196 Netscape Certificate Management System Administrator's Guide • June 2003
The browser sent an OCSP query to the Certificate Manager (this response
was initiated when you clicked the View button).
The Certificate Manager sent an OCSP response to the browser.
The browser used that response to validate the certificate and informed
you of its status (that the certificate could not be verified).
The Certificate Manager published the CRL (the revoked certificate) to the
Online Certificate Status Manager.
The browser sent an OCSP response to the Online Certificate Status
Manager (this response was initiated when you clicked the View button).
The Online Certificate Status Manager sent an OCSP response to the
browser.