Netscape Certificate Management System 6.01, Manual

Page: 214 / 377

NSCertTypeExt Plug-in Module
214 Netscape Certificate Management System Plug-Ins Guide • May 2002
Additionally, the default enrollment forms—the directory-based, directory- and
PIN-based, manual, Kerberos server-based, and NIS server-based enrollment
forms—for various types of certificates also include the appropriate HTTP input
variables corresponding to Netscape certificate type extension bits. For details
about these forms, see “Enrollment Forms” on page 53.
Figure 4-20 shows the default directory-based enrollment form for end users with
HTTP input variables specific to Netscape certificate type extension highlighted; it
shows two of the total number of variables listed in Table 4-19,
ssl_client
and
email
, indicating that these bits be set in certificates requested using this form.
Figure 4-20
Netscape certificate type extension-specific variables in enrollment forms
Note that the default enrollment forms embed variables that are considered
appropriate for the type of certificate, such as client, server, or CA, that can be
requested using the form. For example, the server enrollment form embeds the
ssl_server
variable, whereas the subordinate CA (Certificate Manager)
enrollment form embeds the
ssl_client
,
email_ca
,
ssl_ca
and
object_signing_ca
variables.
In general, the forms are set up so that you don’t have to make any modifications.
However, if there is a need to modify the bit settings, be sure to add or remove the
corresponding variable. Also, when adding a new variable, make sure that the
HTML input format is as follows:
<input type="HIDDEN" value="true" name="variable_name">