SubjectAltNameExt Plug-in Module
Chapter
4
Certificate Extension Plug-in Modules
237
SubjectAltNameExt Rule
The policy rule named
SubjectAltNameExt
is an instance of the
SubjectAltNameExt
module. Certificate Management System automatically
creates this rule during installation. By default, the rule is configured as follows:
•
The rule is enabled.
•
The predicate expression is left blank so that the extension gets added to all
certificates the server issues. (PKIX and Federal PKI standards recommend that
CA certificates must have this extension and end-entity certificates should
have this extension.)
•
The extension is marked noncritical (to comply with the PKIX
recommendation).
•
The rule is configured to include at the most three alternative names in the
extension (
numGeneralNames=3
).
•
The first alternative name is the value of the
attribute in the certificate
subject’s directory entry (
generalName0.requestAttr=AUTH_TOKEN.mail
)
and the name is in the
rfc822Name
format
(
generalName0.generalNameChoice=rfc822Name
).
•
The second alternative name is the value of the
mailalternateaddress
attribute in the certificate subject’s directory entry
(
generalName1.requestAttr=AUTH_TOKEN.mailalternateaddress
) and the
name is in the
rfc822Name
format
(
generalName1.generalNameChoice=rfc822Name
).
•
The third alternative name is the value of an HTTP input parameter
csrRequestorEmail
included in the certificate request
(
generalName2.requestAttr=HTTP_PARAMS.csrRequestorEmail
) and the
name is in
rfc822Name
format
(
generalName2.generalNameChoice=rfc822Name
).
For details on individual parameters defined in the rule, see Table 4-26 on
page 235. You need to review this rule and make the changes appropriate for your
PKI setup. For instructions, see section “Step 2. Modify Existing Policy Rules” in
Chapter 18, “Setting Up Policies” of CMS Installation and Setup Guide. For
instructions on adding additional instances, see section “Step 4. Add New Policy
Rules” in the same chapter.
Before you edit the default rule, you should read the additional details about the
attributes that are set in the default policy rule.
Summary of Contents for Certificate Management System 6.01
Page 1: ...Plug Ins Guide Netscape Certificate Management System Version6 01 May 2002...
Page 10: ...10 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide May 2002...
Page 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide May 2002...
