Creating symbolic links for CAPATH

Use the ZPUBK REHASH command to create symbolic links for a certificate authority path (CAPATH).

To create symbolic links for a directory of certificates, enter the following command:
ZPUBK REHASH PATH-pathname
pathname
The fully qualified path name of a directory that contains certificates to create symbolic links for.
The ZPUBK REHASH command is functionally similar to the c_rehash utility of OpenSSL.
  1. The ZPUBK REHASH command removes any invalid symbolic links that point to nonexistent files in the directory.
  2. The ZPUBK REHASH command creates symbolic links for valid privacy enhanced mail (PEM) certificates but skips any invalid files.
Links are removed and created by using a hash of the subject name of a certificate in the following format:
hhhhhhhh.d
hhhhhhhh
The subject name hash, where h is a hexadecimal digit.
d
A non-negative integer that is used to distinguish different certificates that have the same subject name.
When the ZPUBK REHASH command is successfully issued on a directory of certificates, the directory can be used as a CAPATH of OpenSSL.

Examples

The following example shows a directory of certificates before you run the ZPUBK REHASH command.
User:   ZFILE ls -l /certificates
System: CSMP0097I 09.16.19 CPU-B SS-BSS  SSU-HPN  IS-01
        FILE0001I 09.16.19 START OF DISPLAY FROM ls -l /certificates
        total 32
        -rw-r--r--  1 root  bin  1310 Dec 17 09:12 cert1.pem
        -rw-r--r--  1 root  bin  1602 Dec 17 09:14 cert2.pem
        -rw-r--r--  1 root  bin  1602 Dec 17 09:15 cert3.pem _
        -rw-r--r--  1 root  bin  1602 Dec 17 09:15 cert4.pem
        END OF DISPLAY+
The following example runs the ZPUBK REHASH command to create symbolic links in the /certificates directory.
User:   ZPUBK REHASH PATH-/certificates
System: CSMP0097I 09.18.26 CPU-B SS-BSS  SSU-HPN  IS-01
        PUBK0029I 09.18.26 ZPUBK REHASH PROCESSING FOR DIRECTORY /certificates COMPLETED.
The following example shows the /certificates directory after you run the ZPUBK REHASH command.
User:   ZFILE ls -l /certificates
System: CSMP0097I 09.17.39 CPU-B SS-BSS  SSU-HPN  IS-01
        FILE0001I 09.17.39 START OF DISPLAY FROM ls -l /certificates
        total 64
        -rw-r--r--  1 root  bin  1310 Dec 17 09:12 cert1.pem
        -rw-r--r--  1 root  bin  1602 Dec 17 09:14 cert2.pem
        -rw-r--r--  1 root  bin  1602 Dec 17 09:15 cert3.pem _
        -rw-r--r--  1 root  bin  1602 Dec 17 09:15 cert4.pem
        lrwxrwxrwx  1 root  bin     9 Dec 17 09:17 739ae239.0 -. cert1.pem 
        lrwxrwxrwx  1 root  bin     9 Dec 17 09:17 68672434.0 -. cert2.pem
        lrwxrwxrwx  1 root  bin     9 Dec 17 09:17 65218152.1 -. cert3.pem
        lrwxrwxrwx  1 root  bin     9 Dec 17 09:17 65218152.2 -. cert4.pem
        END OF DISPLAY+