Netscape Certificate Management System 6.01, Manual

Page: 165 / 377

CRLDistributionPointsExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 165
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==CEP-Request
critical
Specifies whether the extension should be marked critical or noncritical in certificates
specified by the
predicate
parameter. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the extension
noncritical (default).
numPoints
Specifies the total number of CRL distribution points to be contained or allowed in
the extension.
By default, this field is set to
3
and the UI shows fields for configuring three
distribution points. You can change the total number of distribution points by
changing the value assigned to this parameter; there’s no restriction on the total
number of distribution points you can include in the extension.
Note that each distribution point has its own set of configuration parameters and you
must specify appropriate values for each of those parameters; otherwise the policy
rule will return an error. Each set of configuration parameters is distinguished by
<n>
, which is an integer derived from the value you assign in this field. For example,
if you set the
numPoints
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no distribution points can be contained in the extension.
•
n
specifies the total number of distribution points to be included in the extension;
it must be an integer greater than zero. The default is
3
.
Example:
2
Table 4-8
Description of parameters defined in the CRLDistributionPointsExt module (Continued)
Parameter Description