Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual

Also see for Certificate Management System 6.1: Manual Manual

Contents

Netscape MANAGEMENT SYSTEM 6.1 - ADMINISTRATOR Administrator's Manual Manual pdf 655 page image

Testing Publishing to FilesChapter 15 Publishing 655Testing Publishing to FilesTo verify that the Certificate Manager is publishing certificates and CRLs correctlyto files, follow these steps:1. Go to the end-entity interface and request a certificate.2. Go to the agent services interface and approve the request if you have anagent-approved enrollment configuration. If you set up automatic enrollment,you can skip this step.3. Download the certificate into your browser.4. Check whether the server generated the DER-encoded file containing thecertificate.To check whether the server published the certificate as a binary blob to thespecified directory, go to the directory you specified for the server to publishcertificates. You should see a file with name similar tocert-.der, where specifies the serialnumber of the certificate contained in the file.5. Convert the DER-encoded certificate to its base 64-encoded format using theBinary to ASCII tool (see Chapter 8, “Binary to ASCII Tool” of CMSCommand-Line Tools Guide).To convert the DER-encoded certificate to its base 64-encoded form:a. Open a command window.b. Go to this directory: /bin/cert/toolsc. At the prompt, enter this: BtoA substituting with the path to the file that contains the DERencoded certificate and with the path to the file to writethe base-64 encoded certificate.For example, if the file is in C:\certificates\cert-1234.der and youwant the base-64 encoded certificate to be inC:\certificates\cert-1234.txt, the command would look like this:BtoA C:\certificates\cert-1234.derC:\certificates\cert-1234.txt