Re: SSL Certificates and cimtrust

Hi Souvik,

There is no way that certificates can be installed without using the 
cimtrust command or using its interface 
(PG_SSLCertificate.addCertificate()). There is 1-1 correspondence between 
the actual certificate and PG_SSLCertifcate instance. Without 
corresponding PG_SSLCertifcate instance to the certificate, the 
authentication would fail.

Venkat




From:   <[email protected]>
To:     <[email protected]>
Date:   11/05/2011 09:57
Subject:        SSL Certificates and cimtrust



Hi,
  we want to verify a CIM Client through SSL Certificates by adding the 
Client Certificate using cimtrust in the CIMOM. We found that after adding 
though cimtrust for root user, a certificate entry is created in the 
sslTrustStore folder and a SSl Certificate instances are created in the 
repository/root#PG_Internal/instances/. In those instances, Certificate 
path CIM Property is assigned to the absolute path of the related 
certificate residing in the sslTrustStore. 
 
So the problem is, if we want to create an installer ( other modules along 
with CIMOM) , Installer need to put the Pegasus folder, set environment 
variables and start CIMOM and additionally run cimtrust to add the 
certificate in the repository. Is there any way to get rid of running the 
cimtrust in the installing systems? In that case, we will provide CIMOM 
folder along with repository and the sslTrustStore with the certificate, 
set the environment variables and start cimserver only.
 
 
Thanks and regards,
Souvik Roy
Wipro Technologies 
Block - DM, Sector -V Salt Lake. Kolkata- 700091. India 
VOIP: 8584750
Direct: +91 33 30954750
 
Only when the last tree has died and the last river been poisoned and the 
last fish been caught will we realise we cannot eat money
 
Please do not print this email unless it is absolutely necessary. 
The information contained in this electronic message and any attachments 
to this message are intended for the exclusive use of the addressee(s) and 
may contain proprietary, confidential or privileged information. If you 
are not the intended recipient, you should not disseminate, distribute or 
copy this e-mail. Please notify the sender immediately and destroy all 
copies of this message and any attachments. 
WARNING: Computer viruses can be transmitted via email. The recipient 
should check this email and any attachments for the presence of viruses. 
The company accepts no liability for any damage caused by any virus 
transmitted by this email. 
www.wipro.com