Netscape Certificate Management System 6.0, Manual

Page: 192 / 377

KeyUsageExt Plug-in Module
192 Netscape Certificate Management System Plug-Ins Guide • March 2002
keyAgreement
Specifies whether to set the
keyAgreement
bit (or bit 4) of the key usage extension
in certificates specified by the
predicate
parameter.
Permissible values:
true
,
false
, or
HTTP_INPUT
.
• Select
true
if you want the server to set the bit (default).
• Select
false
if you don’t want the server to set the bit.
• Select
HTTP_INPUT
if you want the server to check the certificate request for
the HTTP input variable corresponding to the
keyAgreement
bit and set the
bit accordingly. If the variable is set to
true
, the server sets the bit. If the
variable doesn’t exist or if it is set to
false
(or any other value), the server
doesn’t set the bit.
keyCertsign
Specifies whether to set the
keyCertSign
bit (or bit 5) of the key usage extension
in certificates specified by the
predicate
parameter.
Permissible values:
true
,
false
, or
HTTP_INPUT
.
• Select
true
if you want the server to set the bit (default).
• Select
false
if you don’t want the server to set the bit.
• Select
HTTP_INPUT
if you want the server to check the certificate request for
the HTTP input variable corresponding to the
keyCertsign
bit and set the bit
accordingly. If the variable is set to
true
, the server sets the bit. If the variable
doesn’t exist or if it is set to
false
(or any other value), the server doesn’t set
the bit.
cRLSign
Specifies whether to set the
cRLSign
bit (or bit 6) of the key usage extension in
certificates specified by the
predicate
parameter.
Permissible values:
true
,
false
, or
HTTP_INPUT
.
• Select
true
if you want the server to set the bit (default).
• Select
false
if you don’t want the server to set the bit.
• Select
HTTP_INPUT
if you want the server to check the certificate request for
the HTTP input variable corresponding to the
CRLsign
bit and set the bit
accordingly. If the variable is set to
true
, the server sets the bit. If the variable
doesn’t exist or if it is set to
false
(or any other value), the server doesn’t set
the bit.
Table 4-15
Description of parameters defined in the KeyUsageExt module (Continued)
Parameter Description