Netscape Certificate Management System 6.0, Manual

Page: 191 / 377

KeyUsageExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 191
nonRepudiation
Specifies whether to set the
nonRepudiation
bit (or bit 1) of the key usage
extension in certificates specified by the
predicate
parameter.
Permissible values:
true
,
false
, or
HTTP_INPUT
.
• Select
true
if you want the server to set the bit (default).
• Select
false
if you don’t want the server to set the bit.
• Select
HTTP_INPUT
if you want the server to check the certificate request for
the HTTP input variable corresponding to the
nonRepudiation
bit and set
the bit accordingly. If the variable is set to
true
, the server sets the bit. If the
variable doesn’t exist or if it is set to
false
(or any other value), the server
doesn’t set the bit.
keyEncipherment
Specifies whether to set the
keyEncipherment
bit (or bit 2) of the key usage
extension in certificates specified by the
predicate
parameter.
Permissible values:
true
,
false
, or
HTTP_INPUT
.
• Select
true
if you want the server to set the bit (default).
• Select
false
if you don’t want the server to set the bit.
• Select
HTTP_INPUT
if you want the server to check the certificate request for
the HTTP input variable corresponding to the
keyEncipherment
bit and set
the bit accordingly. If the variable is set to
true
, the server sets the bit. If the
variable doesn’t exist or if it is set to
false
(or any other value), the server
doesn’t set the bit.
dataEncipherment
Specifies whether to set the
dataEncipherment
bit (or bit 3) of the key usage
extension in certificates specified by the
predicate
parameter.
Permissible values:
true
,
false
, or
HTTP_INPUT
.
• Select
true
if you want the server to set the bit (default).
• Select
false
if you don’t want the server to set the bit.
• Select
HTTP_INPUT
if you want the server to check the certificate request for
the HTTP input variable corresponding to the
dataEncipherment
bit and set
the bit accordingly. If the variable is set to
true
, the server sets the bit. If the
variable doesn’t exist or if it is set to
false
(or any other value), the server
doesn’t set the bit.
Table 4-15
Description of parameters defined in the KeyUsageExt module (Continued)
Parameter Description