Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION, Administration Manual

Page: 498 / 554

Appendix A. Certificate and CRL Extensions
476
Parameter Description
critical
Sets whether the extension is critical or noncritical. By default,
this is critical.
Table A.6. DeltaCRL Configuration Parameters
A.5.1.4. FreshestCRL
A.5.1.4.1. OID
2.5.29.27
A.5.1.4.2. Criticality
PKIX requires that this extension must be noncritical.
A.5.1.4.3. Discussion
The freshestCRL extension identifies how delta CRL information is obtained. The freshestCRL
extension is placed in the full CRL to indicate where to find the latest delta CRL.
A.5.1.4.4. Parameters
Parameter Description
enable
Sets whether the extension rule is enabled. By
default, this is disabled.
critical
Marks the extension as critical or noncritical. The
default is noncritical.
numPoints Indicates the number of issuing points for the
delta CRL, from
0
to any positive integer; the
default is
0
. When setting this to an integer other
than 0, set the number, and then click
OK
to
close the window. Re-open the edit window for
the rule, and the fields to set these points will be
present.
pointType
n
Specifies the type of issuing point for the
n
issuing point. For each number specified in
numPoints
, there is an equal number of
pointType
parameters. The options are either
DirectoryName
or
URIName
.
pointName
n
If
pointType
is set to
directoryName
, the
value must be a string in the form of an X.500
name, similar to the subject name in a certificate.
For example,
CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US
.
If
pointType
is set to
URIName
, the name
must be a URI; the URI must be an absolute
pathname and must specify the host. For