Difference Between Digital Certificate Label And A Keyring Label and Difference Between Digital Certificate Name And Keyring Name

Products

• Top Secret

Issue/Introduction

There might be confusion using terms "digital certificate label" and "keyring label" as well as "digital certificate name" and "keyring name".

Resolution

Every time you encounter a word for digital certificate or keyring "LABEL", it's means you have to use what it is called in Top Secret terms:

LABLCERT (label-name) or LABLRING(ring name)

You must not use what it is called in Top Secret terms:

DIGICERT (8-byte-name) or KEYRING(key ring)

Those values are used internally by Top Secret and are used to administrate the digital certificates and keyrings with Top Secret .

To illustrate this, see below and an excerpt of a slapd.conf file using ssl:

TLSKeyringName LDAP151/SSL_Ldap151_keyring_label
TLSCertificateLabel SSL_Ldap151_certificate_label

where SSL_Ldap151_keyring_label and SSL_Ldap151_certificate_label are respectively the label of a keyring then of a digital certificate.

DIGICERT = LDAPSSL1 ACCESSORID = LDAP151
LABEL = SSL_Ldap151_certificate_label

KEYRING = L151KEYR ACCESSORID = LDAP151
KEYRING LABEL = SSL_Ldap151_keyring_label

Note the DIGICERT and KEYRING values compared to LABEL and KEYRING LABEL.