From 5fb8ce4a6b537ef6d0f0f8e49ede2241e60dda3e Mon Sep 17 00:00:00 2001 From: Pritam Singh Date: Thu, 20 Feb 2025 18:44:06 +0530 Subject: [PATCH] Added 'token' and 'pki_cert_chain_path' configuration parameters --- .../ocsp/Installing_OCSP_Clone_with_HSM.adoc | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/docs/installation/ocsp/Installing_OCSP_Clone_with_HSM.adoc b/docs/installation/ocsp/Installing_OCSP_Clone_with_HSM.adoc index 445f0aaae90..129fefb8caa 100644 --- a/docs/installation/ocsp/Installing_OCSP_Clone_with_HSM.adoc +++ b/docs/installation/ocsp/Installing_OCSP_Clone_with_HSM.adoc @@ -28,6 +28,8 @@ pki_hsm_modulename=softhsm pki_token_name=HSM pki_token_password=Secret.HSM +pki_cert_chain_path=ca_signing.crt + [Tomcat] pki_ajp_port=8009 pki_tomcat_server_port=8005 @@ -46,6 +48,8 @@ pki_ds_base_dn=dc=ocsp,dc=pki,dc=example,dc=com pki_ds_database=ocsp pki_ds_password=Secret.123 +pki_security_domain_hostname=pki.example.com +pki_security_domain_https_port=8443 pki_security_domain_name=EXAMPLE pki_security_domain_user=caadmin pki_security_domain_password=Secret.123 @@ -55,6 +59,11 @@ pki_audit_signing_nickname=ocsp_audit_signing pki_sslserver_nickname=sslserver/replica.example.com pki_subsystem_nickname=subsystem +pki_ocsp_signing_token=HSM +pki_audit_signing_token=HSM +pki_sslserver_token=HSM +pki_subsystem_token=HSM + pki_clone=True pki_clone_replicate_schema=True pki_clone_uri=https://pki.example.com:8443 @@ -84,6 +93,7 @@ Certificate Nickname Trust Attributes SSL,S/MIME,JAR/XPI ca_signing CT,C,C +sslserver/replica.example.com ,, ocsp_audit_signing ,,P ....