Table of Contents
Advertisement
About CRLs
.\CMCRevoke -d<dir to cert8.db, key3.db> -n<nickname>
-i<issuerName> -s<serialName> -m<reason to revoke> -c<comment>
For example, if the directory containing the agent certificate is
nickname of the certificate is
number of the certificate is
.\CMCRevoke -d".\.netscape" -n"RegistartionManagerAgentCert"
-i"cn=agentAuthMgr" -s22 -m0 -c"test comment"
Go to the end entity interface at the following URL:
3.
https://localhost/ca/
Select the Revocation Tab.
4.
Select the CMC Revoke link on the menu.
5.
Paste the output of step 2 into the text area
6.
Remove
CERTIFICATE REQUEST-----"
Click Submit.
7.
Verify that the returned page confirms that the certificate 22 has been revoked.
8.
About CRLs
Server and client applications that use public-key certificates as tokens of
identification need access to information about the validity of a certificate; because
one of the factors that determines the validity of a certificate is its revocation status,
these applications need to know whether the certificate being validated has been
revoked. In that regard, the CA has a responsibility to do the following:
•
Revoke the certificate if any of the certificate assertions becomes false.
•
Make the revoked certificate status available to parties or applications that
need to verify its validity status.
Whenever a certificate is revoked the Certificate Manager automatically updates
the status of the certificate in its internal database—it marks the copy of the
certificate in its internal database as revoked and removes the revoked certificate
from the publishing directory, if the Certificate Manager is configured to remove
the certificate from the database.
596
Netscape Certificate Management System Administrator's Guide • June 2003
RegistartionManagerAgentCert
22
"-----BEGIN NEW CERTIFICATE REQUEST-----" and "----END NEW
, the command would look like this:
from the pasted content.
, the
.netscape
, and the serial
Advertisement
Table of Contents
