Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Administrator'S Manual

Page: 509 / 840

Extension-Specific Policy Module Reference
Chapter 12 Policies 509
• Select
OID
for extensions that have ASN.1 OBJECT IDENTIFIER values.
• Select
Boolean
for extensions that have ASN.1 BOOLEAN values. It’s case insensitive
and accepts
true
or
false
as value.
attribute.<n>.
source
Specifies the data source for attribute
n
in the extension, where
n
is an identifier assigned to
identify parameters pertaining to a specific attribute. The value of
n
can be
0
to
9
.
In some cases, it may be preferable to put the value of an attribute in a file, instead of
specifying it in the configuration parameters. This may be the case if the value of the attribute
is a long text file or octet-string, for example.
Permissible values:
Value
or
File
. (The attribute’s
value
parameter is interpreted
according to the value specified for this parameter.)
•
Value
specifies that the attribute’s
value
parameter is literally the value to be inserted
in the extension (default).
•
File
specifies that the attribute’s
value
parameter is a fully-qualified pathname of a file
containing the value to be inserted in the extension.
attribute.<n>.
value
Specifies the data value for attribute
n
, where
n
is an identifier assigned to identify
parameters pertaining to a specific attribute. The value of
n
can be
0
to
9
.
Permissible values: Depends on the data type and source you selected.
• If the data type is
Integer
, enter an integer in decimal notation as value. For example,
1234567890
.
• If the data type is
IA5String
, enter a normal string as value. For example,
Test of
IA5String
.
• If the data type is
OctetString
and if the data source is
Value
, enter the value in
colon-separated ASCII hexadecimal encoding notation. For example,
11:22:33:44:A0:B0:C0:D0:E0:F0
.
If data source is
File
, enter the complete file path, including the filename, in the
specified format; for example,
/usr/customExt/octet_string_value.txt
.
When specifying file path in a Windows NT system do not use the NT native file
separator, the backward slash (
\
). Use Unix style file separator, the forward slash (
/
),
instead.
• If the data type is
PrintableString
, enter a normal string as value. For example,
This_is_a_printable_string
.
• If the data type is
UTCTime
, enter a date in
mm/dd/yy
format. For example, April 5,
2000 would be
4/5/00
and October 10, 2001 would be
10/10/01
.
• If the data type is
OID
, enter a valid OID. For example,
11.33.234.99
.
• If the data type is
Boolean
, enter
true
or
false
as value. For example,
true
.
Table 12-24 GenericASN1Ext Configuration Parameters (Continued)
Parameter Description