z/OS Cryptographic Services System SSL Programming
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Sending the certificate request

z/OS Cryptographic Services System SSL Programming
SC14-7495-00

The certificate request file can either be transferred to another system (for example, FTP as an ASCII text file) and then transferred to the certificate authority or placed directly into a mail message sent to a certificate authority using cut-and-paste methods.

In addition to the certificate request file that is generated, a request database (.rdb) file is also created or altered. The request database is named the same as the key database file, except it has an extension of .rdb. For example, a key database file of key.kdb causes a request database file of key.rdb to be created. This request database file must be saved along with the key database in order for the response for the certificate request to be successfully processed.

The certificate request must not be deleted from the database while the request is being processed by the signing certificate authority. The database certificate request is required for applicable processing when the signed certificate from the certificate authority is received. The removal of the certificate request from the database causes the private key associated with the certificate request to be lost.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014