pchengi / ca-web Goto Github PK

1. You need to have a directory with all signed certificates (ASCII, PEM format), present in this directory.
2. Specify the certificate directory in the configuration file caops.conf.
3. Generate newcertlist.txt by executing gencertlist.sh. Check for correctness, and if ok, rename it to certlist.txt.
4. Replace rootca.pem with your CA's root certificate and signingpolicy.txt with your CA's signing policy.
5. Replace templates/cp-cps.html with your CA's CP/CPS. If you have derived it from the ESGF CA CP/CPS template, you can generate a html version of the latex file by using the pandoc program. The command for the pandoc conversion is as follows:
	pandoc -f latex -t html cadoc.tex -o cp-cps.html -N
Ensure that the CP/CPS html document has the proper version number and date.
6. Keep the certlist.txt updated with the list of certificates signed by your CA.
7. Maintain the list of revoked certificates in the revokelist.txt file.