Netscape Certificate Management System 6.01, Manual

Page: 225 / 377

PolicyMappingsExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 225
The policy mappings extension policy in Certificate Management System allows
setting of the policy mappings extension as defined in its X.509 definition. The
policy allows you to map policy statements of one CA to that of another by pairing
the OIDs assigned to their policy statements. (For information on OIDs, see
Appendix B, “Object Identifiers.”) For information on certificate policies, see
“CertificatePoliciesExt Plug-in Module” on page 148.)
Each pair is defined by two parameters,
issuerDomainPolicy
and
subjectDomainPolicy
. The pairing indicates that the issuing CA considers the
issuerDomainPolicy
equivalent to the
subjectDomainPolicy
of the subject CA.
The issuing CA’s users may accept an
issuerDomainPolicy
for certain
applications. The policy mapping tells these users which policies associated with
the subject CA are equivalent to the policy they accept.
During installation, Certificate Management System automatically creates an
instance of the policy mappings extension policy. See “PolicyMappingsExt Rule”
on page 228.
Configuration Parameters of PolicyMappingsExt
In the CMS configuration file, the
PolicyMappingsExt
module is identified as
ca.Policy.impl.PolicyMappingsExt.class=com.netscape.cms.
policy.PolicyMappingsExt
.
In the CMS window, the module is identified as
PolicyMappingsExt
. Figure 4-24
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-24 Parameters defined in the PolicyMappingsExt module