Netscape Certificate Management System 6.0, Руководство пользователя

Страница: 149 / 377

CertificatePoliciesExt Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 149
The certificate policies extension policy in Certificate Management System enables
you to set the extension with the following information:
• The name of the your company or organization.
• The OID assigned to the policy statement you want to include in the certificate.
• A pointer (URI) to the published Certification Practice Statement (CPS).
Any company deploying its own PKI should make a CPS available to anyone
who may come across certificates issued by the CA deployed in the PKI. (The
reason for this is people outside the company intranet may receive signed
email messages from an employee.) To see an example of a CPS, check this site:
http://people.netscape.com/shadow/cps.html
• A textual user notice (which the application validating the certificate can
interpret and display).
During installation, Certificate Management System automatically creates an
instance of the certificate policies extension policy. See “CertificatePoliciesExt
Rule” on page 152.
Configuration Parameters of
CertificatePoliciesExt
In the CMS configuration file, the
CertificatePoliciesExt
module is identified
as
<subsystem>.Policy.impl.CertificatePoliciesExt.class=
com.netscape.cms.policy.CertificatePoliciesExt
, where
<subsystem>
is
ca
or
ra
(prefix identifying the subsystem).
In the CMS window, the module is identified as
CertificatePoliciesExt
. Figure
4-5 shows how the configurable parameters for the module are displayed in the
CMS window.