What Is The Difference Between A Digital Certificate Label And A Keyring Label? Also, What Is The Difference Between A Digital Certificate Name And A Keyring Name?

Document ID : KB000017914
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

There might be confusion using terms "digital certificate label" and "keyring label" as well as "digital certificate name" and "keyring name".

Solution:

Every time you encounter a word for digital certificate or keyring "LABEL", it's means you have to use what it is called in CA Top Secret terms:

LABLCERT (label-name) or LABLRING(ring name)

You must not use what it is called in CA Top Secret terms:

DIGICERT (8-byte-name) or KEYRING(key ring)

Those values are used internally by CA Top Secret and are used to administrate the digital certificates and keyrings with CA Top Secret .

To illustrate this, see below and an excerpt of a slapd.conf file using ssl:

TLSKeyringName LDAP151/SSL_Ldap151_keyring_label
TLSCertificateLabel SSL_Ldap151_certificate_label

where SSL_Ldap151_keyring_label and SSL_Ldap151_certificate_label are respectively the label of a keyring then of a digital certificate.

DIGICERT = LDAPSSL1 ACCESSORID = LDAP151
LABEL = SSL_Ldap151_certificate_label

KEYRING = L151KEYR ACCESSORID = LDAP151
KEYRING LABEL = SSL_Ldap151_keyring_label

Note the DIGICERT and KEYRING values compared to LABEL and KEYRING LABEL.