This article is valid for Certificate Manager 8.4 and later.
The dp.properties file contains the configuration parameters used by the Distribution Point servlet.
http://<pgwy-host>:<port>/pgwy/dp[/<handler>]
Paths: The paths specified below are relative to <cm-gateway>
Parameters
Parameter | Description |
---|---|
start | Controls if the Distribution Point servlet should start or not. start = false |
filter | Contains a filter for the handler part of the URL specified as a regular expression. |
format | Contains the name of a format definition file. |
cxlprocedure | The CM procedure to fetch CRL/CIL files from. |
ca | Contains the name of the CA to fetch the certificate from. |
cache | Optional Determines the duration that the files should be cached, before retrieval from CF once again. PT0S for no caching. May only be configured for the entire servlet, not on per handler basis. Default value: PT60S #default.cache = PT60S |
cxlfile | A relative path to the CRL/CIL file for distribution. The path is relative to <cm-gateway>. Only X509 CRL and CILs are supported. |
cafile | A relative path to the CA file for distribution. The path is relative to <cm-gateway>. Only X509 CA certificates in DER format are supported. |
Define handlers
Get CRL from CRL procedure crl/{crl-name}
#handler.0.filter = cxl/Example CA.crl #handler.0.cxlprocedure = Example CRL Procedure #handler.0.format = dp_cxl_download
Get CA cert from CM by CA name ca/{ca-name}
#handler.1.filter = ca/Example CA Cert #handler.1.ca = Example CA ID #handler.1.format = dp_ca_download
Get CRL from file crl/{ca-name}
#handler.2.filter = crl/example_root.crl #handler.2.cxlfile = example_root.crl #handler.2.format = dp_cxl_download
Get CA from file ca/{ca-name}
#handler.3.filter = ca/example_root.cer #handler.3.cafile = example_root.cer #handler.3.format = dp_ca_download