Netscape Certificate Management System 6.0, Manual

Page: 219 / 377

OCSPNoCheckExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 219
During installation, Certificate Management System automatically creates an
instance of the OCSP no check extension policy. See “OCSPNoCheckExt Rule” on
page 220.
Configuration Parameters of OCSPNoCheckExt
In the CMS configuration file, the
OCSPNoCheckExt
module is identified as
<subsystem>.Policy.impl.OCSPNoCheckExt.class=com.netscape.
cms.policy.OCSPNoCheckExt
, where
<subsystem>
is
ca
or
ra
(prefix identifying
the subsystem).
In the CMS window, the module is identified as
OCSPNoCheckExt
. Figure 4-22
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-22
Parameters defined in the OCSPNoCheckExt module
The configuration shown in Figure 4-22 creates a policy rule named
OCSPNoCheckExtForResponderCert
, which enforces a rule that the server should
set the OCSP no check extension in OCSP responder certificates only.
Table 4-21 provides details for each of these parameters.