Netscape Certificate Management System 6.0, Manual

Page: 200 / 377

NameConstraintsExt Plug-in Module
200 Netscape Certificate Management System Plug-Ins Guide • March 2002
Configuration Parameters of
NameConstraintsExt
In the CMS configuration file, the
NameConstraintsExt
module is identified as
ca.Policy.impl.NameConstraintsExt.class=com.netscape.cms.policy.
NameConstraintsExt
.
In the CMS window, the module is identified as
NameConstraintsExt
. Figure 4-18
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-18 Parameters defined in the NameConstraintsExt module
The configuration shown in Figure 4-18 creates a policy rule named
NameConsExtForCACert
, which enforces a rule that the server should set the name
constraints extension as a critical extension in CA certificates.
Table 4-16 gives details about each of these parameters.