Netscape Certificate Management System 6.0, Руководство пользователя

Страница: 226 / 377

PolicyMappingsExt Plug-in Module
226 Netscape Certificate Management System Plug-Ins Guide • March 2002
The configuration shown in Figure 4-24 creates a policy rule named
PolicyMapExtForCACert
, which enforces a rule that the server should set the
policy mappings extension in CA certificates only.
Table 4-23 provides details for each of these parameters.
Table 4-23
Description of parameters defined in the PolicyMappingsExt module
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Check the box to enable the
rule. Uncheck the box to disable the rule (default).
• If you enable the rule and set the remaining parameters correctly, the
server adds the policy mappings extension to certificates specified by the
predicate
parameter.
• If you disable the rule, the server does not add the extension to certificates;
it ignores the values in the remaining fields.
predicate
Specifies the predicate expression for this rule. If you want this rule to be
applied to all certificate requests, leave the field blank (default). To form a
predicate expression, see section “Using Predicates in Policy Rules” in Chapter
18, “Setting Up Policies” of CMS Installation and Setup Guide.
Example:
HTTP_PARAMS.certType==ca
critical
Specifies whether the extension should be marked critical or noncritical in
certificates specified by the
predicate
parameter. Check the box if you want
the server to mark the extension critical. Uncheck the box if you want the
server to mark the extension noncritical (default).