Red Hat NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Guía de instalación descargar pdf (Pagina 50)

Using Secure Sockets Layer (SSL) With an Agent

50 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005

❍ cert-file is the base-64 encoded root CA certificate file.

For more information on the

certutil utility, enter certutil -H for online

Help.

4. To verify that the certificate is properly installed, at the command line, enter

the following:

# ./certutil -L -d .

Trust database information will be displayed including the name of the root

CA certificate you installed. For example:

To Install the Root CA Certificate on Web Proxy Server

You can use the certutil program to install the root CA Certificate on Proxy

Server.

1. In C shell, at the command line, enter the following commands:

# mkdir Proxy_Server_Instance_Dir/cert

# cd

Proxy_Server_Instance_Dir

/cert

# setenv LD_LIBRARY_PATH

Agent_Install_Dir

/SUNWam/agents/proxy/lib:/

Agent_Install_Dir

/SUNWam/agent

s/lib:/usr/lib/mps

2. Create the necessary certificate database if you have not already done so.

Certificate Name Trust Attrubutes

cert-name C,C,C

p Valid peer

P Trusted peer (implies c)

c Valid CA

T Trusted CA to issue client certs (implies c)

C Trusted CA to certs(only server certs for ssl) (implies c)

u User cert

w Send warning

1 2 ... 45 46 47 48 49 50 51 52 53 54 55 ... 191 192

Sin comentarios

Red Hat NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Guía de instalación Pagina 50