Netscape Certificate Management System 6.0, Manual

Page: 159 / 377

CertificateScopeOfUseExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 159
Configuration Parameters of
CertificateScopeOfUseExt
In the CMS configuration file, the
CertificateScopeOfUseExt
module is
identified as
<subsystem>.Policy.impl.CertificateScopeOfUseExt.class=
com.netscape.cms.policy.CertificateScopeOfUseExt
, where
<subsystem>
is
ca
or
ra
(prefix identifying the subsystem).
In the CMS window, the module is identified as
CertificateScopeOfUseExt
.
Figure 4-7 shows how the configurable parameters for the module are displayed in
the CMS window.
Figure 4-7
Parameters defined in the CertificateScopeOfUseExt module
The configuration shown in Figure 4-7 creates a policy rule named
CertScopeOfUseExtForClientCert
, which enforces a rule that the server should
set the certificate scope of use extension in client certificates only.
Table 4-7 gives details about each of these parameters.