[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

certificationAuthority

Subject: certificationAuthority
From: John Anthony Grigutis <email@hidden>
Date: Tue, 8 Nov 2005 11:48:43 -0500
Delivered-to: email@hidden
Delivered-to: email@hidden

Has anyone had any success in adding a CA to Open Directory (in cn=certificateauthorities)? There is an option in Keychain Access to "Search Directory Services For Certificates" but nothing shows up in that keychain after adding the object to the directory. From what I've been able to find, the object should look like:

dn: ou=iuca,cn=certificateauthorities,dc=ods,dc=iu,dc=edu objectClass: organizationalUnit objectClass: certificationAuthority ou: iuca authorityRevocationList;binary:: MIICjjCCAfcCAQEwDQYJKoZIhvcNAQEEBQAwgdIxCzA… cACertificate;binary:: MIIE3TCCBEagAwIBAgIBATANBgkqhkiG9w0BAQQFADCBvDELMAkGA… certificateRevocationList;binary:: MIICjjCCAfcCAQEwDQYJKoZIhvcNAQEEBQAwgdIxC…

Since our CA isn't signing any other CAs, they won't have any ARL. It's a required attribute though, so I've just used the CRL for the authorityRevocationList attribute as well.

I haven't found any documentation from Apple about this. Any ideas?

--
John Anthony Grigutis
User Support Specialist III
Apple Certified (ACHDS/ACSA)
Indiana University : UITS : STC : Macintosh/Unix Team

Attachment: smime.p7s
Description: S/MIME cryptographic signature

 _______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden

Follow-Ups:
- Re: certificationAuthority
  - From: Joel Rennich <email@hidden>

Prev by Date: 10.4.3 Server Config Files Location(s)
Next by Date: Re: Load testing of AFP server
Previous by thread: Re: 10.4.3 Server Config Files Location(s)
Next by thread: Re: certificationAuthority
Index(es):
- Date
- Thread

Home