User guide

SSL Libraries Used with the Certificate/Key Management Environment
8-11
The example below assumes the site certificate is contained in /export/home/my_site_cert.der file.
# cmentcert /export/home/my_site_cert.der -ed /export/home/sslcert -own -nn
MySiteCert
Note
For the CORBA service, if you do not authenticate clients, you do not have to register site certificates on
CORBA clients.
Registering CRL
Register the CRL in the certificate management environment.
Example
The example below assumes the CRL is contained in d:\sslenv\crl.der file.
cmentcrl d:\sslenv\crl.der -ed d:\sslenv\sslcert
The example below assumes the CRL is contained in /entdir/crl.der file.
# cmentcrl /entdir/crl.der -ed /export/home/sslcert
Operating the Client Certificate
To perform client authentication using SSL version 3.0, the web browser needs the client certificate.
It is also required that the CA certificate that issued the client certificate be registered in the certificate/key
management environment. Web Server can use client certificates issued by VeriSign Inc. only.
To perform client authentication on InfoProvider Pro, specify as follows in the SSL environment definition
file:
• Specify "3" or "2 3" for the SSL version (version).
• Specify "ON" for the verification method (clcertcheck) of the client certificate.