Installation guide

Using Secure Sockets Layer (SSL) With an Agent
50 Sun ONE Identity Server Policy Agents 2.1 • Web Policy Agents Guide • April 2005
❍ cert-file is the base-64 encoded root CA certificate file.
For more information on the
certutil utility, enter certutil -H for online
Help.
4. To verify that the certificate is properly installed, at the command line, enter
the following:
# ./certutil -L -d .
Trust database information will be displayed including the name of the root
CA certificate you installed. For example:
To Install the Root CA Certificate on Web Proxy Server
You can use the certutil program to install the root CA Certificate on Proxy
Server.
1. In C shell, at the command line, enter the following commands:
# mkdir Proxy_Server_Instance_Dir/cert
# cd Proxy_Server_Instance_Dir /cert
# setenv LD_LIBRARY_PATH
/
Agent_Install_Dir /SUNWam/agents/proxy/lib:/ Agent_Install_Dir /SUNWam/agent
s/lib:/usr/lib/mps
2. Create the necessary certificate database if you have not already done so.
Certificate Name Trust Attrubutes
cert-name C,C,C
p Valid peer
P Trusted peer (implies c)
c Valid CA
T Trusted CA to issue client certs (implies c)
C Trusted CA to certs(only server certs for ssl) (implies c)
u User cert
w Send warning