HoldInstruction Rule
286
Netscape Certificate Management System Plug-Ins Guide • March 2002
HoldInstruction Rule
The
HoldInstruction
rule enables you to configure a Certificate Manager to set
the CRL Hold Instruction Extension defined in X.509 and PKIX standard RFC 2459
(see
http://www.ietf.org/rfc/rfc2459.txt
) in CRLs. The extension is a
non-critical CRL entry extension that is used to specify a registered instruction
identifier—the identifier indicates what action the validating application should
take when it encounters a certificate that has been placed on hold.
For general guidelines on setting the CRL hold instruction code in CRL entries, see
“holdInstructionCode” on page 365.
Figure 7-5 shows how the configurable parameters for the
HoldInstruction
rule
are displayed in the CMS window.
Figure 7-5
Parameters defined in the HoldInstruction rule
The configuration shown in Figure 7-5 specifies that the server should not set the
hold instruction extension in CRL entries.
Table 7-6 describes these parameters.
Summary of Contents for Certificate Management System 6.0
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 0 March 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide March 2002...
