Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 474 / 840

Using JavaScript for Policies
474 Red Hat Certificate System Administrator’s Guide • September 2005
1.
In the Policy Rules Management tab, click Reorder.
The Reorder Policy Rules window appears. It lists configured policy rules in the order
in which they are executed by the subsystem.
2.
To change the order of a rule, select it in the list and click the Up or Down button, as
appropriate.
Keep in mind that the server executes the rules on a first-come-first-served basis,
overwriting the configuration determined by the previous rule, if any.
3.
When you have the correct order, click OK.
You are returned to the Policy Rules Management tab.
4.
To view the updated configuration, click Refresh.
Testing Policy Configuration
To make sure that you’ve configured the server correctly, request a certificate and check the
certificate for details such as for validity period, key type and size, and extensions.
1.
Enroll for a Certificate
2.
Approve the Request
3.
Check the Certificate Details
Verify that the certificate contains the required details. Be sure to check the Extension
section to see if it contains all the required extensions.
Using JavaScript for Policies
CS includes a facility for complex scripting of the policy plug-in instances via JavaScript TM .
Using the JavaScript policy processor allows you to:
• Determine the call sequence of existing Java plug-ins
• Use complex logic to determine whether to call a plug-in (versus the simpler
predicates)
• Write policies in JavaScript
• Develop extensions without needing to know Java or have the Java SDK