Netscape Certificate Management System 6.2, Administrator'S Manual

Page: 647 / 874

Rules
Chapter 15 Publishing 647
type. Select the type value from the list. The type value depends on which type
of certificate this rule applies. For a Certificate Manager signing certificate, the
value is
cacert
. For a cross-signed certificate, the value is
xcert
. For all other
types of certificates, the value is
certs
. For CRLs, specify
crl
.
predicate. Type the predicate value for the type of certificate, or CRL issuing
point this rule applies. The predicate value for each type of certificate is listed
in Table 15-11 on page 647
.
The predicate value for CRL issuing points and
delta CRLs is listed in Table 15-12 on page 648
.
enable. Select to enable this rule.
mapper. Mappers are not necessary when publishing to a file, they are only
needed for LDAP publishing. If this rule will be associated with a publisher
that publishes to an LDAP directory, select an appropriate mapper here. Leave
blank for all other forms of publishing.
publisher. Select a publisher you created that will be associated with this rule.
For example, if this rule publishes user certificates to a file, chose the publisher
that publishes to a file in the location set up for user certificates.
7.
Click OK.
The Rules Management tab appears, listing the new rule you just created for
publishing the CA certificate to the file.
8.
Repeat this procedure to create publishing rules for each rule you will need.
Predicates Used In Publishing Rules
Table 15-11 lists the predicates that can be used to identify certificate types.
Table 15-11 Certificate Types and Predicate Expressions
End-entity certificate type Type Predicate
SSL client certificate
certs HTTP_PARAMS.certType==client
SSL server certificate
certs HTTP_PARAMS.certType==server
Object signing certificate
certs HTTP_PARAMS.certType==objSignClient
Certificate Manager signing certificate
cacert HTTP_PARAMS.certType==ca
Registration Manager signing certificate
certs HTTP_PARAMS.certType==ra
OCSP responder certificate
certs HTTP_PARAMS.certType==ocspResponder
Router certificate
certs HTTP_PARAMS.certType==CEP-Router
Cross-signed certificate
certs HTTP_PARAMS.certType==fbca