NSCCommentExt Plug-in Module
208
Netscape Certificate Management System Plug-Ins Guide • March 2002
•
The total number of excluded subtrees to be contained in the extension is set to
3 (
numExcludedSubtrees=3
).
•
The maximum number of permitted subtrees is set to
-1
(
permittedSubtrees<n>.max=-1
) and the minimum number of permitted
subtrees is set to
0
(
permittedSubtrees<n>.min=0
).
•
The maximum number of excluded subtrees is set to
-1
(
excludedSubtrees<n>.max=-1
) and the minimum number of excluded
subtrees is set to
0
(
excludedSubtrees<n>.min=0
).
•
The general name type and value fields for each subtree are left blank for you
to select or enter the appropriate values.
For details on individual parameters defined in the rule, see Table 4-16 on
page 201. You need to review this rule and make the changes appropriate for your
PKI setup. For instructions, see section “Step 2. Modify Existing Policy Rules” in
Chapter 18, “Setting Up Policies” of CMS Installation and Setup Guide. For
instructions on adding additional instances, see section “Step 4. Add New Policy
Rules” in the same chapter.
NSCCommentExt Plug-in Module
The
NSCCommentExt
plug-in module implements the Netscape certificate comment
extension policy. This policy enables you to configure Certificate Management
System to add the Netscape Certificate Comment Extension (see
http://www.netscape.com/eng/security/cert-exts.html
) to certificates. The
extension can be used to include textual comments in certificates. Applications that
are capable of interpreting the comment may display it to a relying party when the
certificate is used or viewed.
For general guidelines on setting the Netscape certificate comment extension, see
“netscape-comment” on page 368.
The Netscape certificate comment extension policy in Certificate Management
System allows you to specify a textual statement or a comment to be included in
certificates. You may choose to directly embed the text in the certificate itself or
point to the file that contains the statement.
During installation, Certificate Management System automatically creates an
instance of the Netscape certificate comment extension policy. See
“NSCCommentExt Rule” on page 211.
Summary of Contents for Certificate Management System 6.0
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 0 March 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide March 2002...
