Overview of Extension-Specific Policy Modules
Chapter
4
Certificate Extension Plug-in Modules
131
As indicated in Table 4-1, Certificate Management System enables you to add
almost all of the extensions defined in the PKIX standard RFC 2459
(
http://www.ietf.org/rfc/rfc2459.txt
). All modules have three features in
common, enabling you to specify these:
•
Whether to add the extension to certificates.
•
The certificates to which the extension is to be added.
•
Whether to mark the extension critical or noncritical.
By default, only noncritical extensions are added to certificates. This ensures that
the resulting certificates can be used with all clients. If you add a critical extension,
the resulting certificate can only be used by clients that support that extension.
Additionally, the server also provides a module for adding any custom, ASN.1
type extensions. If you determine that the default policy modules do not meet your
requirements entirely, you can develop a custom module using CMS SDK. It is
available in the form of Java Docs at this location:
<server_root>/cms_sdk/cms_jdk/javadocs
PolicyConstraintsExt
Adds the Policy Constraints extension to certificates. For details,
see “PolicyConstraintsExt Plug-in Module” on page 221.
PolicyMappingsExt
Adds the Policy Mappings extension to certificates. For details, see
“PolicyMappingsExt Plug-in Module” on page 224.
PrivateKeyUsagePeriodExt
Adds the Private Key Usage Period extension to certificates. For
details, see “PrivateKeyUsagePeriodExt Plug-in Module” on
page 228.
RemoveBasicConstraintsExt
Detects and removes the Basic Constraints extension in certificate
requests. For details, see “RemoveBasicConstraintsExt Plug-in
Module” on page 230.
SubjectAltNameExt
Adds the Subject Alternative Name extension to certificates. For
details, see “SubjectAltNameExt Plug-in Module” on page 232.
SubjectDirectoryAttributesExt
Adds a Subject Directory Attributes extension to certificates. For
details, see “SubjectDirectoryAttributesExt Plug-in Module” on
page 238.
SubjectKeyIdentifierExt
Adds the Subject Key Identifier extension to certificates. For
details, see “SubjectKeyIdentifierExt Plug-in Module” on
page 242.
Table 4-1
Default extension-specific policy plug-in modules (Continued)
Plug-in module
Function
Summary of Contents for Certificate Management System 6.01
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 01 May 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide May 2002...
