Configuring Certificate Manager to Publish to Files
Chapter
20
Publishing Certificates and CRLs to a File
663
Step F. Check the File for the CRL
Whenever the Certificate Manager generates a CRL, it automatically attempts to
publish the CRL to the configured repository—in this case, the flat file. The CRL it
publishes is a binary blob, in the DER-encoded format. To check whether the
Certificate Manager published the correct CRL (in this case, the CRL contains only
one certificate), you need to do the following:
1.
Check whether the server generated the DER-encoded file containing the CRL.
To check whether the server published the CRL as a binary blob to the
specified directory, go to the directory you specified for the server to publish
CRLs. You should find a file with its name in the
crl-<this_update>.der
format, where
<this_update>
specifies the value derived from the
time-dependent variable named
This Update
of the CRL contained in the file.
If you don’t see the file, check your configuration.
2.
Convert the DER-encoded CRL to its base 64-encoded format using the Binary
to ASCII tool (see Chapter 8, “Binary to ASCII Tool” of CMS Command-Line
Tools Guide).
To convert the DER-encoded CRL to its base 64-encoded form:
a.
Open a command window.
b.
Go to this directory:
<server_root>/bin/cert/tools
c.
At the prompt, enter this:
BtoA[.bat] <input_file> <output_file>
substituting
<input_file>
with the path to the file that contains the
DER-encoded CRL and
<output_file>
with the path to the file to write
the base-64 encoded CRL. (The optional
.bat
specifies the file extension;
this is required only when running the utility on a Windows NT system.)
For example, if the DER-encoded file is in
C:\crls\crl-949102696899.der
and you want the base-64 encoded CRL
to be in
C:\crls\crl-949102696899.txt
, the command would look like
this:
BtoA C:\crls\crl-949102696899.der
C:\crls\crl-949102696899.txt
Summary of Contents for NETSCAPE MANAGEMENT SYSTEM 6.0
Page 1: ...Installation and Setup Guide Netscape Certificate Management System Version6 0 March 2002...
Page 22: ...22 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 32: ...32 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 160: ...160 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 776: ...776 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 807: ...807 Part 5 Appendix Appendix A Certificate Download Specification...
Page 808: ...808 Netscape Certificate Management System Installation and Setup Guide March 2002...
Page 830: ...830 Netscape Certificate Management System Installation and Setup Guide March 2002...
