PolicyMappingsExt Plug-in Module
Chapter
4
Certificate Extension Plug-in Modules
225
The policy mappings extension policy in Certificate Management System allows
setting of the policy mappings extension as defined in its X.509 definition. The
policy allows you to map policy statements of one CA to that of another by pairing
the OIDs assigned to their policy statements. (For information on OIDs, see
Appendix B, “Object Identifiers.”) For information on certificate policies, see
“CertificatePoliciesExt Plug-in Module” on page 148.)
Each pair is defined by two parameters,
issuerDomainPolicy
and
subjectDomainPolicy
. The pairing indicates that the issuing CA considers the
issuerDomainPolicy
equivalent to the
subjectDomainPolicy
of the subject CA.
The issuing CA’s users may accept an
issuerDomainPolicy
for certain
applications. The policy mapping tells these users which policies associated with
the subject CA are equivalent to the policy they accept.
During installation, Certificate Management System automatically creates an
instance of the policy mappings extension policy. See “PolicyMappingsExt Rule”
on page 228.
Configuration Parameters of PolicyMappingsExt
In the CMS configuration file, the
PolicyMappingsExt
module is identified as
ca.Policy.impl.PolicyMappingsExt.class=com.netscape.cms.
policy.PolicyMappingsExt
.
In the CMS window, the module is identified as
PolicyMappingsExt
. Figure 4-24
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 4-24
Parameters defined in the PolicyMappingsExt module
Содержание Certificate Management System 6.0
Страница 1: ...Plug Ins Guide Netscape Certificate Management System Version6 0 March 2002...
Страница 10: ...10 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 62: ...Enrollment Forms 62 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 126: ...ValidityConstraints Plug in Module 126 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 266: ...LdapSubjAttrMap Plug in Module 266 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 308: ...NTEventLog Plug in Module 308 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 324: ...DNs in Certificate Management System 324 Netscape Certificate Management System Plug Ins Guide March 2002...
Страница 370: ...CA Certificates and Extension Interactions 370 Netscape Certificate Management System Plug Ins Guide March 2002...