How to fetch a CRL directly from KCA LDAP database
Originally Published: 2002-12-16
Last Modified: 2023-11-30
Article Number
Applies To
Issue
Resolution
1. To retrieve PEM formatted CRL, you can use the following:
ldap://<KCA-host-name>:<LDAP-port>/md5=<MD5-of-the-CA>?certificaterevocationlist?
2. To retrieve the CRL in binary(DER), the following would work (*** Only when local CRL publishing is enabled):
ldap://<KCA-host-name>:<LDAP-port>/<DN-of-the-CA-cert>?certificaterevocationlist?
For example:
ldap://host.name:389:/c=us,st=ca,l=westerville,o=acme,ou=security,cn=myca?certificaterevocationlist?
Related Articles
Oracle Statspack and Oracle Automatic Workload Repository (AWR) in RSA Identity Governance & Lifecycle Number of Views CreateChangeRequest webservice call with <AccountChange> does not fail on SoD Violations for RSA Via Lifecycle & Governance Number of Views Implementing Risk-Based Authentication Number of Views RSA Identity Governance & Lifecycle authentication fails if the authentication sources uses Aveksa Data Collector (ADC) an… Number of Views Add an Identity Source SSL Certificate Number of Views
Trending Articles
Don't see what you're looking for?
