Netscape Certificate Management System 6.0, Manual

Page: 202 / 377

NameConstraintsExt Plug-in Module
202 Netscape Certificate Management System Plug-Ins Guide • March 2002
numExcludedSubtrees
Specifies the total number of subtrees to be excluded in the extension. Note
that each excluded subtree has a set of configuration parameters and you
must specify appropriate values for each of these parameters; otherwise
the policy rule will return an error.
You can change the total number of excluded subtrees by changing the
value in this field; there’s no restriction on the total number of excluded
subtrees you can include in the extension. Each set of configuration
parameters is distinguished by
<n>
, which is an integer derived from the
value you assign in this field. For example, if you set the
numExcludedSubtrees
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no excluded subtrees can be contained in the extension.
•
n
specifies the total number of excluded subtrees to be included in the
extension; it must be an integer greater than zero. The default value is
8.
Example:
2
permittedSubtrees<n>.
base.generalNameChoice
Specifies the general-name type for the permitted subtree you want to
include in the extension.
Permissible values:
rfc822Name
,
directoryName
,
dNSName
,
ediPartyName
,
URI
,
iPAddress
,
registeredID
, or
otherName
.
• Select
rfc822Name
if the subtree is an Internet mail address (default).
• Select
directoryName
if the subtree is an X.500 directory name.
• Select
dNSName
if the subtree is a DNS name.
• Select
ediPartyName
if the subtree is a EDI party name.
• Select
URL
if the subtree is a uniform resource locator.
• Select
iPAddress
if the subtree is an IP address.
• Select
OID
if the subtree is an object identifier.
• Select
otherName
if the subtree is in any other name form.
Example:
directoryName
Table 4-16
Description of parameters defined in the NameConstraintsExt module (Continued)
Parameter Description