HP Open Source Security for OpenVMS Volume 2: HP SSL for ...

Signed Request File specification
Use OpenVMS syntax (defaults to SSL$CRT:SIGNED.CRT).
Default Days
The default number of days until the signed certificate expires.
PEM Passphrase
Using the Certificate Tool
Revoke a Certificate
This is a verification field only. You must use the same passphrase you used to create the certificate
authority (option 5).
2. View the details of the signed certificate (if you chose to display the certificate):
Version (SSL 3.0 protocol)
Serial number (Certificates issued by a CA have a serial number that is unique to the certificates
issued by that CA.)
Signature algorithm
Issuer (your distinguished name)
Validity (inception and expiration dates)
Public key information
3.9 Revoke a Certificate
You should revoke a certificate if the certificate has been compromised. The security of a certificate can be
compromised if, for example, someone has a copy of the private key, or knows the password to your encrypted
key.
A certificate can be revoked by the Certificate Authority that issued the certificate. You can also use the HP
SSL Certificate Tool to revoke a certificate, if the certificate was created using the Certificate Tool.
To revoke a certificate using the Certificate Tool, perform the following steps:
1. From the Main Menu, select Option 7 - Revoke a Certificate.
2. Enter the filenames of the Certificate Authority (CA) certificate and key.
3. Enter the filename of the certificate to be revoked.
4. Enter the PEM passphrase of the CA's key.
The Certificate Tool marks that certificate as being revoked in its database.
After you revoke the certificate, you must create a certificate revocation list (CRL).
3.10 Create a Certificate Revocation List
After you have revoked all known compromised certificates, you should create a Certificate Revocation List
(CRL). You can create a CRL using the HP SSL Certificate Tool.
47