How to retreive public keys in certificate authorities using HTTP/HTTPS requests.

Products

• Encryption Management Server
• PGP Command Line
• PGP Encryption Suite
• PGP Key Management Server
• PGP Key Mgmt Client Access and CLI API
• PGP SDK
• Desktop Email Encryption
• Drive Encryption
• Endpoint Encryption
• File Share Encryption
• Gateway Email Encryption

Issue/Introduction

Can we use HTTP/s protocol instead of the LDAP/s protocol to retrieve public keys of external clients?

Resolution

  Add " Key Servers" on the platform with LDAP or HTTP URL to retreive public Keys.

  For Instance:

         Type = PGP Keyserver LDAP (Port 389) or PGP Universal Services Protocol (port 80 or 443)
         Hostname = domain name that we request to retrieve the public keys of the external recepients

         

       Can we use HTTP/S protocol instead of LDAP/S protocol to retrieve public keys of external Clients?

       No, It has to be LDAP or LDAPS.

       If you want third parties to be able to lookup your certificates, you need to:

       1. Ensure that the Keyserver service is enabled under Services / Keyserver and is assigned to the correct network interface / IP Address.

       2. Allow inbound LDAP connections to the correct IP on the PGP server from the Internet.

       Example 1:

       If you want to lookup keys from, eg, example.com, then you need to add its details to Keys/ Keyservers. it will be of type X.509 Directory LDAP because it stores S/MIME certificates:

         

 

       Example 2.

       The Base DN is o=Keyserver,c=pgp.com: