Skip to content

Commit

Permalink
Update Installing_OCSP_with_Secure_Database_Connection.adoc
Browse files Browse the repository at this point in the history
[skip ci]
Adding the more common customizable parameters (with default values) readily available for users to modify: instance name, port numbers, and ds ports.
also fixed a link.
  • Loading branch information
ladycfu authored Jan 3, 2025
1 parent 9d6ad3d commit fbd0041
Showing 1 changed file with 10 additions and 1 deletion.
Original file line number Diff line number Diff line change
Expand Up @@ -6,16 +6,23 @@ This page describes the process to install an OCSP subsystem with a secure datab

Ensure that the secure connection has been enabled on the directory server.
Export the signing certificate for the directory server into ds_signing.crt.
This step is described [here](https://www.dogtagpki.org/wiki/DS_SSL).
This step is described link:https://www.dogtagpki.org/wiki/DS_SSL[here].

== OCSP Subsystem Installation ==

Prepare a file (e.g. ocsp.cfg) that contains the deployment configuration, for example:

```
[DEFAULT]
pki_instance_name=pki-tomcat
pki_https_port=8443
pki_http_port=8080
pki_server_database_password=Secret.123

[Tomcat]
pki_ajp_port=8009
pki_tomcat_server_port=8005

[OCSP]
pki_admin_cert_file=ca_admin.cert
[email protected]
Expand All @@ -33,6 +40,8 @@ pki_ds_secure_connection_ca_pem_file=ds_signing.crt
pki_ds_base_dn=dc=ocsp,dc=pki,dc=example,dc=com
pki_ds_database=ocsp
pki_ds_password=Secret.123
pki_ds_ldap_port=389
pki_ds_ldaps_port=636

pki_security_domain_name=EXAMPLE
pki_security_domain_user=caadmin
Expand Down

0 comments on commit fbd0041

Please sign in to comment.