Netscape Certificate Management System 6.0, Manual

Page: 211 / 377

NSCCommentExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 211
NSCCommentExt Rule
The policy rule named
NSCCommentExt
is an instance of the
NSCCommentExt
module. Certificate Management System automatically creates this rule during
installation. By default, the rule is configured as follows:
• The rule is disabled; for the rule to be effective, it must be enabled and
configured appropriately.
• The
predicate
field is left blank so that the extension gets added to all
certificates.
• The extension is marked noncritical.
• The textual statement is to be embedded in certificates (
inputType=Text
).
• The
displayText
and
commentfile
fields are left blank for you to enter the
appropriate information.
For details on individual parameters defined in the rule, see Table 4-17 on
page 210. You need to review this rule and make the changes appropriate for your
PKI setup. For instructions, see section “Step 2. Modify Existing Policy Rules” in
Chapter 18, “Setting Up Policies” of CMS Installation and Setup Guide. For
instructions on adding additional instances, see section “Step 4. Add New Policy
Rules” in the same chapter.
displayText
Specifies the textual statement that should be included in certificates. If you want to
embed a textual statement (for example, your company’s legal notice) in certificates,
then add that statement here. The text you enter here will be displayed to a relying
party when the certificate is used or viewed.
Permissible values: A string with up to 200 characters.
Example:
Example Corporation’s CPS incorp. by reference liab.
ltd. (c) 2002 Example Corporation
commentfile
Specifies the path to the file that contains the textual statement that should be
included in certificates; be sure to include the complete path, including the filename.
Note that the existence of the file is not checked at the time of policy configuration.
The filename will be checked when the policy is applied to a request.
Example:
/usr/netscape/CApolicies/UserCertpolicy.txt
Table 4-17
Description of parameters defined in the NSCCommentExt module (Continued)
Parameter Description