OCSPNoCheckExt Plug-in Module
Chapter
4
Certificate Extension Plug-in Modules
219
During installation, Certificate Management System automatically creates an
instance of the OCSP no check extension policy. See “OCSPNoCheckExt Rule” on
page 220.
Configuration Parameters of OCSPNoCheckExt
In the CMS configuration file, the
OCSPNoCheckExt
module is identified as
<subsystem>.Policy.impl.OCSPNoCheckExt.class=com.netscape.
cms.policy.OCSPNoCheckExt
, where
<subsystem>
is
ca
or
ra
(prefix identifying
the subsystem).
In the CMS window, the module is identified as
OCSPNoCheckExt
. Figure 4-22
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-22
Parameters defined in the OCSPNoCheckExt module
The configuration shown in Figure 4-22 creates a policy rule named
OCSPNoCheckExtForResponderCert
, which enforces a rule that the server should
set the OCSP no check extension in OCSP responder certificates only.
Table 4-21 provides details for each of these parameters.
Summary of Contents for Certificate Management System 6.01
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 01 May 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide May 2002...
