Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 454 / 840

Constraints Reference
454 Red Hat Certificate System Administrator’s Guide • September 2005
Extended Key Usage Extension Constraint
The extended key usage extension constraint checks if the extended key usage extension in
the certificate request satisfies the criteria set in this constraint.
Extension Constraint
This constraint implements the general extension constraint. It checks if the extension is
present or not.
Key Constraint
This constraint checks the key type and key length.
If you leave the field blank, the path length defaults to a value
that is determined by the path length set on the Basic
Constraints extension in the issuer’s certificate. If the issuer’s
path length is unlimited, the path length in the subordinate CA
certificate will also be unlimited. If the issuer’s path length is
an integer greater than zero, the path length in the subordinate
CA certificate will be set to a value that’s one less than the
issuer’s path length; for example, if the issuer’s path length is
4, the path length in the subordinate CA certificate will be set
to 3.
Table 11-19 Extended Key Usage Extension Constraint Configuration Parameters
Parameter Description
Critical
Specifies whether the extension can be marked critical or noncritical.
Select true to allow the extension to be marked critical, select false to
disallow the extension from being marked critical; select
“-”
to indicate
no constraints are placed for this parameter.
exKeyUsageOIDs
Specifies the allowable OIDs that identifies a key-usage purpose. You
can specify more than one separating each with a comma.
Table 11-18 Basic Constraints Extension Constraint Configuration Parameters (Continued)
Parameter Description