Netscape Certificate Management System 6.01, Manual

Page: 160 / 377

CertificateScopeOfUseExt Plug-in Module
160 Netscape Certificate Management System Plug-Ins Guide • May 2002
Table 4-7
Description of parameters defined in the CertificateScopeOfUseExt module
Parameter Description
enable
Specifies whether the rule is enabled or disabled.
• Check the box to enable the rule (default). If you enable the rule and set the
remaining parameters correctly, the server adds the certificate scope of use
extension to certificates specified by the
predicate
parameter.
• Uncheck the box to disable the rule. If you disable the rule, the server does
not add the extension to certificates; it ignores the values in the remaining
fields.
predicate
Specifies the predicate expression for this rule. If you want this rule to be
applied to all certificate requests, leave the field blank (default). To form a
predicate expression, see section “Using Predicates in Policy Rules” in Chapter
18, “Setting Up Policies” of CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client
critical
Specifies whether the extension should be marked critical or noncritical in
certificates specified by the
predicate
parameter. Check the box if you want
the server to mark the extension critical. Uncheck the box if you want the server
to mark the extension noncritical (default).
numEntries
Specifies the total number of sites to be contained or allowed in the extension.
By default, this field is set to
3
and the UI shows fields for configuring three
sites. You can change the total number of sites by changing the value assigned to
this parameter; there’s no restriction on the total number of sites you can
include in the extension.
Note that each site has its own set of configuration parameters and you must
specify appropriate values for each of those parameters; otherwise the policy
rule will return an error. Each set of configuration parameters is distinguished
by
<n>
, which is an integer derived from the value you assign in this field. For
example, if you set the
numEntries
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no sites can be contained in the extension.
•
n
specifies the total number of sites to be included in the extension; it must
be an integer greater than zero. The default is
3
.
Example:
2