Sorry if this question is not 100% OpenCA related, but I'm configuring the CRLDistributionPoints option in etc/config.xml of OpenCA and I've some difficulties in finding a standard way. OpenCA issues certificates and CRL on OpenLDAP, and I want to put the LDAP address in the CDP of all certificates. Suppose I put the CRL in a cn=crl is correct to have:
LDAP://ldapserver/cn=crl,o=PKI,c=IT?certificateRevocationList?base?objectclass=cRLDistributionPoint or is this incorrect ? I've seen some examples like this one: [1]CRL Distribution Point Distribution Point Name: Full Name: URL=ldap:///CN=SecTestCA1,CN=SECTESTCA1,CN=CDP,CN=Public%20Key%20Services, CN=Services,CN=Configuration,DC=rte,DC=microsoft, DC=com?certificateRevocationList?base?objectclass=cRLDistributionPoint [2]CRL Distribution Point Distribution Point Name: Full Name: URL=http://sectestca1.rte.microsoft.com/CertEnroll/SecTestCA1.crl [3]CRL Distribution Point Distribution Point Name: Full Name: URL=file://\\sectestca1.rte.microsoft.com\CertEnroll\SecTestCA1.crl In this last example I'm not able to find how the URL in [1] has been constructed compared to the [2] (in particular the server name). Thanks for the help. -- Diego de Felice ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ Openca-Users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openca-users
