Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 436 / 840

Defaults Reference
436 Red Hat Certificate System Administrator’s Guide • September 2005
Freshest CRL Extension Default
This default populates the Freshest CRL extension in the certificate request. The
Freshest
CRL Extension Default
enables you to configure a Certificate Manager to set the
FreshestCRL Extension in certificate.
You can define the following constraints with this default:
• Extension Constraint, see “Extension Constraint,” on page 454.
• No Constraints, see “No Constraint,” on page 456.
This default allows you to define 5 locations and specify parameters for each location. The
parameters are marked with an
<n>
in the table to distinguish that the parameter is
associated with one of the five possible locations.
Table 11-6 Freshest CRL Extension Default Configuration Parameters
Parameter Description
Critical
Select true to mark this extension critical; select false to mark the
extension noncritical.
PointEnable_<n>
Select true to enable this point; select false to disable this point.
PointType_<n>
Specifies the type of issuing point. Select from
DirectoryName
and
URIName.
PointName_<n>
• If
pointType
is set to
directoryName
, the value must be a
string form of X.500 name, similar to the subject name in a
certificate. For example,
CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US
.
• If
pointType
is set to
URI
, the name must be a URIName; the
URIName must be an absolute pathname and must specify the host.
For example:
http://testCA.example.com/get/your/crls/here/
PointIssuer
Name_<n>
Specifies the name of the issuer that has signed the CRL maintained at
this distribution point, the name can be in any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For example:
CN=CA Central, OU=Research Dept, O=Example
Corporation, C=US
• A URIName; for example:
http://testCA.example.com:80