Red Hat NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Guide d'installation télécharger pdf (Page 87)

Using Secure Sockets Layer (SSL) with an Agent

Chapter 3 Policy Agents on Microsoft Windows 87

Agent_Install_Dir\bin\certutil -L -d cert-dir

You should see the root CA certificate added and listed in the output of the

command.

4. Restart Domino Web Server.

Installing the Root CA Certificate on Microsoft IIS 5.0

1. Go to the following directory:

Agent_Install_Dir\iis\cert

2. Add the same root CA certificate that is installed on the web server that runs

SunONE Identity Serverintotheexisting certificate database.Atthecommand

line, enter the following command:

\Agent_Install_Dir\bin\certutil -A -n cert-name -t "C,C,C" -d cert-dir -i cert-file

where:

❍ cert-name can be any name for this root CA certificate.

❍ cert-dir isthe directory where the certificate and key stores are located. The

location is:

Agent_Install_Dir\iis\cert

Table 3-3 Example of

certutil -L

Output

Certificate Name Trust Attrubutes

cert-name C,C,C

p Valid peer

P Trusted peer (implies c)

c Valid CA

T Trusted CA to issue client certs (implies c)

C Trusted CA to certs(only server certs for ssl) (implies c)

u User cert

w Send warning

1 2 ... 82 83 84 85 86 87 88 89 90 91 92 ... 191 192

Pas de commentaire

Red Hat NETSCAPE DIRECTORY SERVER 6.02 - DEPLOYMENT Guide d'installation Page 87