Netscape Certificate Management System 6.0, Manual

Page: 100 / 377

RenewalConstraints Plug-in Module
100 Netscape Certificate Management System Plug-Ins Guide • March 2002
weeks of validity of the certificate. However, if the interval specified in the policy
rule is not sufficient for renewal to occur, some of your users may not be able to
renew their certificates prior to the expiration time and end up owning expired
certificates.
Note that the policy also allows you to specify how long after the expiration of a
certificate can it be renewed. If you don’t specify this, the server will renew all
expired certificates that are submitted for renewal.
During installation, Certificate Management System automatically creates an
instance of the renewal constraints policy. See “RenewalConstraintsRule Rule” on
page 101.
Configuration Parameters of
RenewalConstraints
In the CMS configuration file, the
RenewalConstraints
module is identified as
<subsystem>.Policy.impl.RenewalConstraints.class=
com.netscape.cms.policy.RenewalConstraints
, where
<subsystem>
is
ca
or
ra
(prefix identifying the subsystem).
In the CMS window, the module is identified as
RenewalConstraints
. Figure 3-6
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 3-6 Parameters of the RenewalConstraints module