Netscape Certificate Management System 6.01, Manual

Page: 210 / 377

NSCCommentExt Plug-in Module
210 Netscape Certificate Management System Plug-Ins Guide • May 2002
Table 4-17
Description of parameters defined in the NSCCommentExt module
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server adds
the Netscape certificate comment extension to certificates specified by the
predicate
parameter. If you enable the policy without specifying values in
displayText
and
commentfile
fields, the server puts an empty string in the
comment extension.
• If you disable the rule, the server does not add the extension to certificates; it
ignores the values in the remaining fields.
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client
critical
Specifies whether the extension should be marked critical or noncritical in certificates
specified by the
predicate
parameter. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the extension
noncritical (default).
inputType
Specifies whether to embed a textual statement or to include a pointer to file that
contains the textual statement in certificates. The extension value is interpreted
according to the value specified for this parameter.
You should consider putting the textual statement in a file because certain
applications may not have the capability to display the text embedded in certificates.
Also, embedding a textual statement in a certificate increases its size. If you’re using
smart cards for generating and storing certificates, you may not want to embed
textual statements in certificates because on a smart card the memory for a certificate
may be limited.
Permissible values:
Text
or
File
.
•
Text
specifies that the textual statement—the value of the
displayText
field—
should be inserted in the extension (default).
•
File
specifies that the path to the file that contains the textual statement—the
value of the
commentfile
field—should be inserted in the extension.
Example:
File