Netscape Certificate Management System 6.0, Руководство пользователя

Страница: 177 / 377

GenericASN1Ext Plug-in Module
Chapter 4 Certificate Extension Plug-in Modules 177
The configuration shown in Figure 4-10 defines a custom extension named
testGenASN1Ext
with OID 2.4.5.99. The extension is non-critical, and it will be
added to all certificates issued by the server. The expected
dumpasn1
output (see
“dumpasn1 Tool” in CMS Command-Line Tools Guide) of the resulting extension,
would look like this:
337 30 148: . . . . SEQUENCE {
340 06 3: . . . . . OBJECT IDENTIFIER '2 4 5 99'
345 04 140: . . . . . OCTET STRING, encapsulates {
348 30 137: . . . . . . . SEQUENCE {
351 13 24: . . . . . . . . PrintableString '1st data in 1st sequence'
377 16 24: . . . . . . . . IA5String '2nd data in 1st sequence'
403 13 32: . . . . . . . . PrintableString 'This is 3rd data in 1st
sequence'
437 04 10: . . . . . . . . OCTET STRING
: . . . . . . . . . 11 22 33 44 A0 B0 C0 D0 E0 F0
449 30 37: . . . . . . . . SEQUENCE {
451 17 13: . . . . . . . . . UTCTime '000406070000Z'
466 30 8: . . . . . . . . . SEQUENCE {
468 01 1: . . . . . . . . . . BOOLEAN TRUE
471 06 3: . . . . . . . . . . OBJECT IDENTIFIER '2 4 5 100'
: . . . . . . . . . . }
476 04 10: . . . . . . . . . OCTET STRING
: . . . . . . . . . 11 22 33 44 A0 B0 C0 D0 E0 F0
: . . . . . . . . . }
: . . . . . . . . }
: . . . . . . . }
: . . . . . }
Table 4-11 describes the configurable parameters of the generic ASN.1 extension
policy module.
Table 4-11 Description of parameters defined in the GenericASN1Ext module
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the rule.
Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the server adds
the configured extension to certificates specified by the
predicate
parameter.
• If you disable the rule, the server does not add the extension to certificates; it
ignores the values in the remaining fields.