How To Install dogtag-pki-ocsp on Fedora 36

In this tutorial we learn how to install dogtag-pki-ocsp in Fedora 36. dogtag-pki-ocsp is Dogtag PKI OCSP Package

Introduction

In this tutorial we learn how to install dogtag-pki-ocsp on Fedora 36.

What is `dogtag-pki-ocsp`

Dogtag PKI Online Certificate Status Protocol (OCSP) Manager is an optional subsystem that can act as a stand-alone OCSP service. The OCSP Manager performs the task of an online certificate validation authority by enabling OCSP-compliant clients to do real-time verification of certificates. Note that an online certificate-validation authority is often referred to as an OCSP Responder. Although the Certificate Authority (CA) is already configured with an internal OCSP service. An external OCSP Responder is offered as a separate subsystem in case the user wants the OCSP service provided outside of a firewall while the CA resides inside of a firewall, or to take the load of requests off of the CA. The OCSP Manager can receive Certificate Revocation Lists (CRLs) from multiple CA servers, and clients can query the OCSP Manager for the revocation status of certificates issued by all of these CA servers. When an instance of OCSP Manager is set up with an instance of CA, and publishing is set up to this OCSP Manager, CRLs are published to it whenever they are issued or updated.

We can use yum or dnf to install dogtag-pki-ocsp on Fedora 36. In this tutorial we discuss both methods but you only need to choose one of method to install dogtag-pki-ocsp.

Install dogtag-pki-ocsp on Fedora 36 Using dnf

Update yum database with dnf using the following command.

sudo dnf makecache --refresh

After updating yum database, We can install dogtag-pki-ocsp using dnf by running the following command:

sudo dnf -y install dogtag-pki-ocsp

Install dogtag-pki-ocsp on Fedora 36 Using yum

Update yum database with yum using the following command.

sudo yum makecache --refresh

After updating yum database, We can install dogtag-pki-ocsp using yum by running the following command:

sudo yum -y install dogtag-pki-ocsp

How To Uninstall dogtag-pki-ocsp on Fedora 36

To uninstall only the dogtag-pki-ocsp package we can use the following command:

sudo dnf remove dogtag-pki-ocsp

dogtag-pki-ocsp Package Contents on Fedora 36

/usr/share/java/pki/pki-ocsp.jar
/usr/share/licenses/dogtag-pki-ocsp
/usr/share/licenses/dogtag-pki-ocsp/LICENSE
/usr/share/pki/ocsp
/usr/share/pki/ocsp/conf
/usr/share/pki/ocsp/conf/CS.cfg
/usr/share/pki/ocsp/conf/Catalina
/usr/share/pki/ocsp/conf/Catalina/localhost
/usr/share/pki/ocsp/conf/Catalina/localhost/ocsp.xml
/usr/share/pki/ocsp/conf/acl.ldif
/usr/share/pki/ocsp/conf/acl.properties
/usr/share/pki/ocsp/conf/auth-method.properties
/usr/share/pki/ocsp/conf/db.ldif
/usr/share/pki/ocsp/conf/index.ldif
/usr/share/pki/ocsp/conf/indextasks.ldif
/usr/share/pki/ocsp/conf/uriworkermap.properties
/usr/share/pki/ocsp/conf/vlv.ldif
/usr/share/pki/ocsp/conf/vlvtasks.ldif
/usr/share/pki/ocsp/setup
/usr/share/pki/ocsp/setup/registry_instance
/usr/share/pki/ocsp/webapps
/usr/share/pki/ocsp/webapps/ROOT
/usr/share/pki/ocsp/webapps/ROOT/WEB-INF
/usr/share/pki/ocsp/webapps/ROOT/WEB-INF/web.xml
/usr/share/pki/ocsp/webapps/ROOT/index.jsp
/usr/share/pki/ocsp/webapps/ocsp
/usr/share/pki/ocsp/webapps/ocsp/404.html
/usr/share/pki/ocsp/webapps/ocsp/500.html
/usr/share/pki/ocsp/webapps/ocsp/GenUnexpectedError.template
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/classes
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/classes/logging.properties
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib/pki-certsrv.jar
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib/pki-cms.jar
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib/pki-cmsbundle.jar
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib/pki-ocsp.jar
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib/slf4j-api.jar
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/lib/slf4j-jdk14.jar
/usr/share/pki/ocsp/webapps/ocsp/WEB-INF/web.xml
/usr/share/pki/ocsp/webapps/ocsp/admin
/usr/share/pki/ocsp/webapps/ocsp/admin/console
/usr/share/pki/ocsp/webapps/ocsp/agent
/usr/share/pki/ocsp/webapps/ocsp/agent/GenError.template
/usr/share/pki/ocsp/webapps/ocsp/agent/GenPending.template
/usr/share/pki/ocsp/webapps/ocsp/agent/GenRejected.template
/usr/share/pki/ocsp/webapps/ocsp/agent/GenSuccess.template
/usr/share/pki/ocsp/webapps/ocsp/agent/GenSvcPending.template
/usr/share/pki/ocsp/webapps/ocsp/agent/GenUnauthorized.template
/usr/share/pki/ocsp/webapps/ocsp/agent/GenUnexpectedError.template
/usr/share/pki/ocsp/webapps/ocsp/agent/cms-funcs.js
/usr/share/pki/ocsp/webapps/ocsp/agent/funcs.js
/usr/share/pki/ocsp/webapps/ocsp/agent/header.template
/usr/share/pki/ocsp/webapps/ocsp/agent/helpfun.js
/usr/share/pki/ocsp/webapps/ocsp/agent/index.jsp
/usr/share/pki/ocsp/webapps/ocsp/agent/index.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/AddCA.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/AddCRL.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/CheckCert.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/addCA.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/addCRL.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/checkCert.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/frameAddCA.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/frameAddCRL.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/frameCheckCert.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/frameListCA.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/frameOCSP.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/frameStats.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/getOCSPInfo.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/getStats.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/index.jsp
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/listCAs.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/menuAddCA.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/menuAddCRL.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/menuCheckCert.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/menuListCA.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/menuOCSP.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/menuStats.html
/usr/share/pki/ocsp/webapps/ocsp/agent/ocsp/removeCA.template
/usr/share/pki/ocsp/webapps/ocsp/agent/ports.template
/usr/share/pki/ocsp/webapps/ocsp/index.jsp
/usr/share/pki/ocsp/webapps/ocsp/services.template
/usr/share/pki/ocsp/webapps/ocsp/ui
/usr/share/pki/ocsp/webapps/ocsp/ui/home.html
/usr/share/pki/ocsp/webapps/ocsp/ui/index.jsp

References

dogtag-pki-ocsp website

Summary

In this tutorial we learn how to install dogtag-pki-ocsp on Fedora 36 using yum and [dnf]((/fedora/36/dnf/).