System information

Option Description
password
The password of the Certificate System user.
pop_option
Optional. Sets the type of POP request to
generate; since this can generate invalid
requests, this option can be used for testing.
There are three values:
• POP_SUCCESS. Generates a request with the
correct POP information; the server verifies
that the information is correct.
• POP_FAIL. Generates a request with
incorrect POP information; the server
rejects this request if it is submitted. This is
used to test server configuration.
• POP_NONE. Generates a CRMF request with
no POP information. If the server is
configured to verify all the POP information,
then it rejects this request. In that case, it
can be used to test the server configuration.
subject_dn
The distinguished name of the requested
certificate.
OUTPUT_CERT_REQ
Optional. Prints the generated certificate
request to the screen.
Table 16.1.
2. Usage
The following example generates a CRMF/POP request for the Certificate System user admin,
has the server verify that the information is correct, and prints the certificate request to the
screen:
CRMFPopClient password123 nullAuthMgr host.redhat.com 1026 admin redhat \
POP_SUCCESS CN=MyTest,C=US,UID=MyUid OUTPUT_CERT_REQ
The following example generates a CRMF/POP request that includes a transport for key
archival in the DRM. The transport.txt file containing the base-64 encoded transport
Chapter 16. CRMF Pop Request
64