Netscape Certificate Management System 6.0, Manual

Page: 227 / 377

PolicyMappingsExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 227
numPolicyMappings
Specifies the total number of policy mapping (pairs) to be contained or allowed
in the extension. Note that each policy mapping represents a pair of
policies—specified by
policyMap<n>.issuerDomainPolicy
and
policyMap<n>.subjectDomainPolicy
—and each policy in the pair
belongs to a specific CA.
You can change the total number of policy pairs by changing the value
assigned to this parameter; there’s no restriction on the total number of policy
pairs you can include in the extension. Each pair is distinguished by
<n>
,
which is an integer derived from the value you assign in this field. For
example, if you set the
numPolicyMappings
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no policy pairs can be contained in the extension.
•
n
specifies the total number of policy pairs to be included in the extension;
it must be a integer greater than zero. The default value is
1
.
Example:
2
policyMap<n>.
issuerDomainPolicy
Specifies the OID assigned to the policy statement
<n>
of the issuing CA that
you want to map with the policy statement of another CA.
Permissible values: Any valid OID specified in dot-separated numeric
component notation (see the example). The OID that you specify should be in
the registered subtree of IDs reserved for your company’s use. Although you
can invent your own OIDs for the purposes of evaluating and testing this
server, in a production environment, you should comply with the ISO rules for
defining OIDs and for registering subtrees of IDs. See Appendix B, “Object
Identifiers
”
for information on allocating private OIDs.
Example:
1.2.3.4.5
policyMap<n>.
subjectDomainPolicy
Specifies the OID assigned to the policy statement
<n>
of the subject CA that
corresponds to the policy statement of the issuing CA.
Permissible values: Any valid OID specified in dot-separated numeric
component notation (see the example).
Example:
6.7.8.9.10
Table 4-23
Description of parameters defined in the PolicyMappingsExt module (Continued)
Parameter Description