Configuring Certificate Revocation Checking

You configure certificate revocation checking for Broker Server by using CRLs.

To configure certificate revocation checking by using CRLs

1. In My webMethods: Messaging > Broker Server s > Servers.

2. Configure SSL. For steps to configure SSL, see section Configuring SSL for Broker Server .

3. In the Broker Server s List, click the Broker Server on which to configure revocation checking. If the Broker Server does not appear in the list, use the Search tab to locate it.

4. Click the SSL tab and then click the Change Configuration button.

5. Click Local Keystore tab.

6. In the Certificate Revocation List File field, type the full path name of the CRL file.

Note:
You must place the CRL file in a location accessible to the Broker Server.

7. In the Certificate Revocation List File Type field, select either PEM or DER file format depending on the CRL type.

8. Click Apply.

9. Repeat steps 5 through 8 to configure certificate checking for remote keystore by clicking the Remote Keystore tab in step 5.