Netscape Certificate Management System 6.01, Manual

Page: 136 / 377

AuthInfoAccessExt Plug-in Module
136 Netscape Certificate Management System Plug-Ins Guide • May 2002
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client
critical
Specifies whether the extension should be marked critical or noncritical in certificates
specified by the
predicate
parameter. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the extension
noncritical (default).
numADs
Specifies the total number of access locations to be contained or allowed in the
extension.
By default, this field is set to
3
and the UI shows fields for configuring three locations.
You can change the total number of locations by changing the value assigned to this
parameter; there’s no restriction on the total number of locations you can include in
the extension.
Note that each location has its own set of configuration parameters and you must
specify appropriate values for each of those parameters; otherwise the policy rule will
return an error. Each set of configuration parameters is distinguished by
<n>
, which
is an integer derived from the value you assign in this field. For example, if you set
the
numADs
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no locations can be contained in the extension.
•
n
specifies the total number of locations to be included in the extension; it must be
an integer greater than zero. The default value is
3
.
Example:
2
ad<n>_method
Specifies the access method for retrieving additional information about the CA that
has issued the certificate in which the extension appears.
Permissible values:
•
ocsp
(or
1.3.6.1.5.5.7.48.1
).
•
caIssuers
(or
1.3.6.1.5.5.7.48.2
).
•
renewal
(or
2.16.840.1.113730.16.1
)
Example 1:
ocsp
Example 2:
1.3.6.1.5.5.7.48.1
Table 4-2
Description of parameters defined in the AuthInfoAccessExt module (Continued)
Parameter Description