Netscape Certificate Management System 6.0, Руководство пользователя

Страница: 178 / 377

GenericASN1Ext Plug-in Module
178 Netscape Certificate Management System Plug-Ins Guide • March 2002
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==client
critical
Specifies whether the extension should be marked critical or noncritical in certificates
specified by the
predicate
parameter. Check the box if you want the server to mark
the extension critical. Uncheck the box if you want the server to mark the extension
noncritical (default).
In general, you should make custom extensions noncritical if you want your
certificates supported by other applications. (Other applications most likely will not
understand your extension.)
name
Specifies the name of the extension. The name is displayed when users view the
details of a certificate that includes the extension.
Permissible values: A unique name that corresponds to the OID specified by the
oid
parameter.
Example:
Example Corp’s Extn1
oid
Specifies the OID assigned to the extension.
Permissible values: A valid OID specified in dot-separated numeric component
notation (see the example). Although you can invent your own OIDs for the purposes
of evaluating and testing this server, in a production environment, you should
comply with the ISO rules for defining OIDs and for registering subtrees of IDs. See
Appendix B, “Object Identifiers”
for information on allocating private OIDs.
Example:
1.22.333.444.55.666
Table 4-11
Description of parameters defined in the GenericASN1Ext module (Continued)
Parameter Description