Netscape Certificate Management System 6.01, Manual

Page: 231 / 377

RemoveBasicConstraintsExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 231
The policy can be useful in certain enrollment scenarios. For example, enrollment
requests from customized clients that can generate CRMF requests can include
extensions, including the Basic Constraints extension, and the policy can detect the
presence of the Basic Constraints extension and remove it.
Configuration Parameters of
RemoveBasicConstraintsExt
In the CMS configuration file, the
RemoveBasicConstraintsExt
module is
identified as
ca.Policy.impl.RemoveBasicConstraintsExt.class=
com.netscape.cms.policy.RemoveBasicConstraintsExt
.
In the CMS window, the module is identified as
RemoveBasicConstraintsExt
.
Figure 4-26 shows how the configurable parameters for the module are displayed
in the CMS window.
Figure 4-26 Parameters defined in the RemoveBasicConstraintsExt module
The configuration shown in Figure 4-26 creates a policy rule named
RemoveBasicConstraintsExtForClientCerts
, which enforces a rule that the
Basic Constraints extension be removed from all client certificate requests.
Table 4-25 provides details for each of these parameters.