Netscape Certificate Management System 6.01, Manual

Page: 315 / 377

DNs in Certificate Management System
Appendix A Distinguished Names 315
Note the following:
• Value converter class converts a string to a ASN.1 value.
• It must implement n
etscape.security.x509.AVAValueConverter
interface.
The string-to-value converter class can be one of these:
•
netscape.security.x509.PrintableConverter
—converts a string to a
Printable String value. The string must have only printable characters.
•
netscape.security.x509.IA5StringConverter
—converts a string to a
IA5String value. The string must have only IA5String characters.
•
netscape.security.x509.DirStrConverter
—converts a string to a
Directory (v3) String. The string is expected to be in DirectoryString format
according to RFC 2253.
•
netscape.security.x509.GenericValueConverter
—converts a string
character by character in the following order, from smaller character sets to
broadest character set: Printable, IA5String, BMPString, Universal String.
For example:
X500Name.MY_ATTR.oid=1.2.3.4.5.6
X500Name.MY_ATTR.class=netscape.security.x509.DirStrConverter
Adding New or Proprietary Attributes
To add a new or proprietary attribute that’s not supported by Certificate
Management System by default:
1.
Stop the Certificate Manager.
2.
Go to this directory:
<server_root>/cert-<instance_id>/config
3.
Open the configuration file,
CMS.cfg
, in a text editor.
4.
Add the new attributes to the configuration file.
For example, if you want to add three proprietary attributes,
MYATTR1
that is a
directoryString
,
MYATTR2
that is a
IA5String
, and
MYATTR3
that is
PrintableString
s, you would add the following lines at the end of the
configuration file:
X500Name.attr.MYATTR1.oid=1.2.3.4.5.6
X500Name.attr.MYATTR1.class=netscape.security.x509.
DirStrConverter
X500Name.attr.MYATTR2.oid=11.22.33.44.55.66
X500Name.attr.MYATTR2.class=netscape.security.x509.