Netscape Certificate Management System 6.01, Manual

Page: 282 / 377

AuthorityKeyIdentifier Rule
282 Netscape Certificate Management System Plug-Ins Guide • May 2002
For general guidelines on setting the authority key identifier extension in CRLs, see
“authorityKeyIdentifier” on page 361.
Figure 7-2 shows how configurable parameters for the
AuthorityKeyIdentifier
rule are displayed in the CMS window.
Figure 7-2 Parameters defined in the AuthorityKeyIdentifier rule
The configuration shown in Figure 7-2 specifies that the server should not set the
authority key identifier extension in CRLs.
Table 7-2 describes these parameters.
Table 7-2 Description of parameters defined in the AuthorityKeyIdentifierExt rule
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server sets
the authority key identifier extension in CRLs.
• If you disable the rule, the server does not add the extension to CRLs; it ignores
the values in the remaining fields.
critical
Specifies whether the extension should be marked critical or noncritical in CRLs
issued by the server. Check the box if you want the server to mark the extension
critical. Uncheck the box if you want the server to mark the extension noncritical
(default).