Netscape Certificate Management System 6.0, Manual

Page: 290 / 377

IssuerAlternativeName Rule
290 Netscape Certificate Management System Plug-Ins Guide • March 2002
The configuration shown in Figure 7-7 specifies that the server should not set the
issuing point extension in CRLs.
Table 7-8 describes these parameters.
Table 7-8 Description of parameters defined in the IssuerAlternativeName rule
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable
the rule. Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the
server sets the issuer alternative name extension in CRLs.
• If you disable the rule, the server does not add the extension to CRLs; it
ignores the values in the remaining fields.
critical
Specifies whether the extension should be marked critical or noncritical in
CRLs issued by the server. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the
extension noncritical (default).
numNames
Specifies the total number of alternative names or identities permitted in
the extension. Note that each name has a set of configuration parameters—
nameType
and
name
—and you must specify appropriate values for each
of those parameters; otherwise, the policy rule will return an error.
You can change the total number of identities by changing the value
specified in this field; there’s no restriction on the total number of
identities you can include in the extension. Each set of configuration
parameters is distinguished by
<n>
, which is an integer derived from the
value you assign in this field. For example, if you set the
numNames
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no identities can be contained in the extension.
•
n
specifies the total number of identities to be included in the
extension; it must be an integer greater than zero. The default value is
3.
Example:
1