Netscape Certificate Management System 6.0, Manual

Page: 234 / 377

SubjectAltNameExt Plug-in Module
234 Netscape Certificate Management System Plug-Ins Guide • March 2002
Configuration Parameters of SubjectAltNameExt
In the CMS configuration file, the
SubjectAltNameExt
module is identified as
<subsystem>.Policy.impl.SubjectAltNameExt.class=com.netscape.
cms.policy.SubjectAltNameExt
, where
<subsystem>
is
ca
or
ra
(prefix
identifying the subsystem).
In the CMS window, the module is identified as
SubjectAltNameExt
. Figure 4-27
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-27
Parameters defined in the SubjectAltNameExt module
The configuration shown in Figure 4-27 creates a policy rule named
SubAltNameExtForClientCert
, which enforces a rule that the alternative name of
the certificate’s subject must be derived from the
mail
attribute of subject’s entry in
the authentication directory and that the server should set the subject alternative
name extension only in client certificates.
Table 4-26 provides details for each of these parameters.