Netscape Certificate Management System 6.0, Manual

Page: 216 / 377

NSCertTypeExt Plug-in Module
216 Netscape Certificate Management System Plug-Ins Guide • March 2002
Table 4-20
Description of parameters defined in the NSCertTypeExt module
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
Uncheck the box to disable the rule (default).
• If you enable the rule, be sure to review the enrollment forms for Netscape
certificate type extension-specific variables and to set the remaining parameters of
this policy correctly. If the bits are unspecified in the enrollment form, the server
checks the value assigned to the
setDefaultBits
parameter. If it is unchecked
(false), the server does not set the extension.
• If you disable the rule, the server does not add the extension to certificates; it
ignores the Netscape certificate type extension-specific HTTP input values in the
certificate request and the status of the
setDefaultBits
parameter.
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client
setDefaultBits
Specifies whether to set the Netscape certificate type extension with default bits in
certificates specified by the predicate expression.
• Check the box the if you want the server to add the extension, with default bits, to
certificates. If you check the box and if no bits are requested from the HTTP input,
the server adds the Netscape certificate type extension to certificates with the
following bits set:
-
ssl client
(bit 0)
-
email
(bit 2)
• Uncheck the box if you don’t want the server to add the extension with default
bits. If you uncheck the box and if no bits are requested from the HTTP input, the
server does not add the extension to certificates.