Novell LINUX ENTERPRISE DESKTOP 11 - SECURITY GUIDE 17-03-2009 Manual page 185

Exporting a CRL to LDAP
Enter the CA containing the CRL to export and select CRL. If desired, create a new
CRL and click Export. The dialog that opens displays the export parameters. You
can export the CRL for this CA either once or in periodical time intervals. Activate
the export by selecting Export to LDAP and enter the respective LDAP data. To
do this at regular intervals, select the Repeated Recreation and Export radio button
and change the interval, if appropriate.
17.2.8 Exporting CA Objects as a File
If you have set up a repository on the computer for administering CAs, you can use this
option to create the CA objects directly as a file at the correct location. Different output
formats are available, such as PEM, DER, and PKCS12. In the case of PEM, it is also
possible to choose whether a certificate should be exported with or without key and
whether the key should be encrypted. In the case of PKCS12, it is also possible to export
the certification path.
Export a file in the same way for certificates, CAs as with LDAP, described in
tion 17.2.7, "Exporting CA Objects to LDAP"
Export as File instead of Export to LDAP. This then takes you to a dialog for selecting
the required output format and entering the password and filename. The certificate is
stored at the required location after clicking OK.
For CRLs click Export, select Export to file, choose the export format (PEM or DER)
and enter the path. Proceed with OK to save it to the respective location.
TIP
You can select any storage location in the file system. This option can also be
used to save CA objects on a transport medium, such as a USB stick. The
/media directory generally holds any type of drive except the hard drive of
your system.
(page 172), except you should select
Managing X.509 Certification
Sec-
173