Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 530 / 874

Extension-Specific Policy Module Reference
530 Netscape Certificate Management System Administrator’s Guide • June 2003
Unlike some of the other policy modules, CMS does not create an instance of the
issuer alternative name extension policy during installation. If you want the server
to add this extension to certificates, you must create an instance of the
IssuerAltNameExt
module and configure it. For instructions, see section “Step 4.
Add New Policy Rules” in Chapter 18, “Setting Up Policies” of CMS
Administrator’s Guide.
Table 11-25 IssuerAltNameExt Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable, deselect
to disable.
predicate
Specifies the predicate expression for this rule. If you want this rule to be
applied to all certificate requests, leave the field blank (default). To form a
predicate expression, see section “Using Predicates in Policy Rules” in
Chapter 18, “Setting Up Policies” of CMS Administrator’s Guide.
Example:
HTTP_PARAMS.certType==ca
critical
Specifies whether the extension should be marked critical or noncritical.
Select to mark critical (default), deselect to mark noncritical.
numGeneralNames
Specifies the total number of alternative names or identities permitted in
the extension. Note that each name has a set of configuration
parameters—
generalName<n>.generalNameChoice
and
generalName<n>.generalNameValue
—and you must specify
appropriate values for each of those parameters; otherwise the policy rule
will return an error. You can change the total number of identities by
changing the value specified in this field; there’s no restriction on the total
number of identities you can include in the extension. Each set of
configuration parameters is distinguished by
<n>
, which is an integer
derived from the value you assign in this field. For example, if you set the
numGeneralNames
parameter to 2,
<n>
would be
0
and
1
.
Permissible values:
0
or
n
.
•
0
specifies that no identities can be contained in the extension (default).
•
n
specifies the total number of identities to be included in the extension;
it must be an integer greater than zero. The default value is 8.
Example:
2
generalName<n>.general
NameChoice
Specifies the general-name type for the alternative name you want to
include in the extension.