DSAKeyConstraints Plug-in Module
92
Netscape Certificate Management System Plug-Ins Guide • March 2002
Configuration Parameters of
DSAKeyConstraints
In the CMS configuration file, the
DSAKeyConstraints
module is identified as
<subsystem>.Policy.impl.DSAKeyConstraints.class=
com.netscape.cms.policy.DSAKeyConstraints
, where
<subsystem>
is
ca
or
ra
(prefix identifying the subsystem).
In the CMS window, the module is identified as
DSAKeyConstraints
. Figure 3-3
shows how configurable parameters for the module are displayed in the CMS
window.
Figure 3-3
Parameters of the DSAKeyConstraints module
The configuration shown in Figure 3-3 creates a policy rule named
DSAKeySizeForClientCert
, which enforces a rule that the server should restrict
the minimum and maximum key sizes for all DSA key-based client certificates to
512 and 1024, respectively.
Table 3-3 describes each of the parameters.
Summary of Contents for Certificate Management System 6.0
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 0 March 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide March 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide March 2002...
