[Pki-users] Dogtag: configuring OCSP URI

[mirkt]

Hello,

Thank you. I have successfully changed OCSP URI in all certificates
generated during installation using two-step installation method:
http://www.dogtagpki.org/wiki/Two-Step_Installation

I had to edit adminCert.profile, caCert.profile,  serverCert.profile,
caAuditSigningCert.profile,  caOCSPCert.profile,  subsystemCert.profile
in /var/lib/pki/NAME/ca/conf/ before "configuration" step..

After installation I had to edit certificate profiles in
/var/lib/pki/NAME/ca/profiles/ca

as you mentioned and now everything works as I wished :)

Good luck
mirkt

2018.04.27 21:08, John Magne rašė:
> Hello:
>
> I believe you could modify the setting in your link for
> every kind of certificate profile that you care about.
> The AIA extension.
>
> The profiles are stored with each instance roughly here:
>
> /var/lib/pki/pki-tomcat/ca/profiles/ca