{"type":"doc","content":[{"type":"paragraph","content":[{"text":"This article describes how to create a trust store that is used by the ","type":"text"},{"text":"Nexus OCSP Responder","type":"text","marks":[{"type":"link","attrs":{"href":"https://nexusdoc.atlassian.net/wiki/spaces/PUB/pages/65345982"}}]},{"text":".","type":"text"}]},{"type":"paragraph","content":[{"text":"The trust store is a file containing certificates for all trusted CAs – the trust anchors. The immediate issuers of the certificates and CRLs/CILs, that certificate status requests are made for, always need to be present in the trust store.","type":"text"}]},{"type":"paragraph","content":[{"text":"To create a trust store, use the command line tool ","type":"text"},{"text":"certadm","type":"text","marks":[{"type":"code"}]},{"text":", located in the ","type":"text"},{"text":"/bin","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":" directory, relative to the directory where Nexus OCSP Responder is installed. See ","type":"text"},{"text":"certadm commands","type":"text","marks":[{"type":"link","attrs":{"href":"#"}}]},{"text":" below for more information.","type":"text"}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Create a trust store in Windows","type":"text"}]},{"type":"paragraph","content":[{"text":"This is an example work flow on how to create a trust store and perform some common commands. When you have created the trust store or performed updates, you must restart Nexus OCSP Responder to make the updates take effect, that is, to be inserted into the cache.","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Create an empty trust store.","type":"text"}]},{"type":"codeBlock","content":[{"text":"certadm new --store=\"C:\\ProgramFiles\\Nexus\\OCSP Responder\\certs\\trust.store\"\ncertadm new --store=..\\certs\\trust.store","type":"text"}]}]}]},{"type":"heading","attrs":{"level":4},"content":[{"text":"Examples:","type":"text"}]},{"type":"bulletList","content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Add the certificate located in the file ","type":"text"},{"text":"newCA.crt","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":" to the trust store.","type":"text"}]},{"type":"codeBlock","content":[{"text":"certadm add --store=../certs/trust.store --file=newCA.crt","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"List the contents of the trust store.","type":"text"}]},{"type":"codeBlock","content":[{"text":"certadm list --store=../certs/trust.store","type":"text"}]},{"type":"paragraph","content":[{"text":"Example of a list result:","type":"text"}]},{"type":"codeBlock","content":[{"text":"(1) CN=D, C=SE\n(2) CN=A, C=SE\n(3) CN=C, C=SE\n(4) CN=B, C=SE\n(5) CN=Q, C=SE","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Example: Extract the certificate of the second issuer in this list to the file ","type":"text"},{"text":"A.crt","type":"text","marks":[{"type":"strong"},{"type":"em"}]},{"text":".","type":"text"}]},{"type":"codeBlock","content":[{"text":"certadm extract 2 --store=../certs/trust.store --file=A.crt","type":"text"}]}]},{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"Example: Delete the certificate of the first issuer in the list.","type":"text"}]},{"type":"codeBlock","content":[{"text":"certadm delete 1 --store=../certs/trust.store","type":"text"}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"Specify the trust store in OCSP configuration file","type":"text"}]},{"type":"orderedList","attrs":{"order":1},"content":[{"type":"listItem","content":[{"type":"paragraph","content":[{"text":"In the OCSP configuration file, specify as follows:","type":"text"}]},{"type":"codeBlock","content":[{"text":"ocsp.trust.store=/.","type":"text"}]},{"type":"paragraph","content":[{"text":"See this table for description of constants and values:","type":"text"}]}]}]},{"type":"table","attrs":{"layout":"default","width":1800.0,"localId":"68481a37-9eb4-445b-a4b0-da1d87e13450"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Constants and Values","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Replace ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" with the directory path to the trust store. Default: ","type":"text"},{"text":"certs","type":"text","marks":[{"type":"code"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Replace ","type":"text"},{"text":" ","type":"text","marks":[{"type":"code"}]},{"text":"with the trust store filename. Default: ","type":"text"},{"text":"trust.store","type":"text","marks":[{"type":"code"}]}]}]}]}]},{"type":"heading","attrs":{"level":1},"content":[{"text":"certadm commands","type":"text"}]},{"type":"paragraph","content":[{"text":"These are some useful ","type":"text"},{"text":"certadm","type":"text","marks":[{"type":"strong"}]},{"text":" commands:","type":"text"}]},{"type":"codeBlock","content":[{"text":"certadm help\ncertadm new --store=\ncertadm add --store= --file=\ncertadm list --store=\ncertadm show \ncertadm extract --store= --file=\ncertadm delete --store=","type":"text"}]},{"type":"paragraph","content":[{"text":"See this table for explanations of the commands:","type":"text"}]},{"type":"table","attrs":{"layout":"default","width":1800.0,"localId":"214545eb-7805-4189-8e63-d0e951a662b8"},"content":[{"type":"tableRow","content":[{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Options and arguments","type":"text","marks":[{"type":"strong"}]}]}]},{"type":"tableHeader","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Description","type":"text","marks":[{"type":"strong"}]}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"help","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to display a description of the options and arguments.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"new ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to create an empty trust store.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"store ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to specify the trust store file. Replace ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" with the path to the trust store file. Write file paths that include spaces within quotation marks.","type":"text"}]},{"type":"paragraph","content":[{"text":"Default: ","type":"text"},{"text":"trust.store","type":"text","marks":[{"type":"code"}]},{"text":" in the current working directory.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"add ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to add a certificate to the trust store.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"file ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to specify the file to read/write a certificate from/to. Replace ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" with the path to the certificate file. Write file paths that include spaces within quotation marks.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"list","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to list the contents of the trust store. You will get a list of all the certificates. Each certificate will be preceded by an integer.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"show ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to display the contents of a specified certificate from the trust store. Replace ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" with the integer that specifies the certificate. You have to execute the list option to get this integer.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"extract ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to extract a specified certificate from the trust store. Replace ","type":"text"},{"text":" ","type":"text","marks":[{"type":"code"}]},{"text":"with the integer that specifies the certificate. You have to execute the list option to get this integer.","type":"text"}]}]}]},{"type":"tableRow","content":[{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"delete ","type":"text","marks":[{"type":"code"}]}]}]},{"type":"tableCell","attrs":{"colspan":1,"rowspan":1},"content":[{"type":"paragraph","content":[{"text":"Use this option to delete a specified certificate from the trust store. Replace ","type":"text"},{"text":"","type":"text","marks":[{"type":"code"}]},{"text":" with the integer that specifies the certificate. You have to execute the list option to get this integer.","type":"text"}]}]}]}]},{"type":"panel","attrs":{"panelType":"note"},"content":[{"type":"paragraph","content":[{"text":"The options store and file must be preceded by \"--\".","type":"text"}]}]},{"type":"paragraph"}],"version":1}

Browser not supported