Netscape Certificate Management System 6.1, Руководство администратора

Страница: 448 / 840

Defaults Reference
448 Netscape Certificate Management System Administrator’s Guide • February 2003
Defaults Reference
Defaults are used to define the contents of a certificate and the values associated
with that content. This section lists the pre built defaults with complete definitions
of each.
Authority Info Access Extension Default
This default populates the Authority Info Access extension. This extension
specifies how an application validating a certificate can access information, such as
on-line validation services and CA policy statements, about the CA that has issued
the certificate. Note that this extension should not be used to point directly to the
CRL location maintained by a CA; the CRL Distribution Points extension explained
in “CRL Distribution Points Extension Default” on page 452 allows you to provide
references to CRL locations.
For general information about this extension, see “authorityInfoAccess” on
page 723.
You can define the following constraints with this default:
• Extension Constraint, see “Extension Constraint,” on page 475
• No Constraints, see “No Constraint,” on page 477.
This default allows you to define 5 locations and specify parameters for each
location. The parameters are marked with an
<n>
in the table to distinguish that the
parameter is associated with one of the five possible locations.
Table 10-1 Authority Info Access Extension Default Configuration Parameters
Parameter Description
Critical
Select true to mark this extension critical; select false to mark
the extension noncritical.
Method_<n>
Specifies the access method for retrieving additional
information about the CA that has issued the certificate in
which the extension appears. Provide one of the following
values:
•
ocsp
(or
1.3.6.1.5.5.7.48.1
).
•
caIssuers
(or
1.3.6.1.5.5.7.48.2
).
•
renewal
(or
2.16.840.1.113730.16.1
)