Netscape Certificate Management System 6.1, Руководство администратора

Страница: 475 / 840

Constraints Reference
Chapter 10 Certificate Profiles 475
Extension Constraint
This constraint implements the general extension constraint. It checks if the
extension is present or not.
Key Constraint
This constraint checks the key type and key length.
Key Usage Extension Constraint
The key usage extension constraint checks if the key usage constraint in the
certificate request satisfies the criteria set in this constraint.
Table 10-19 Extended Key Usage Extension Constraint Configuration Parameters
Parameter Description
Critical
Specifies whether the extension can be marked critical or
noncritical. Select true to allow the extension to be marked critical,
select false to disallow the extension from being marked critical;
select
“-”
to indicate no constraints are placed for this parameter.
exKeyUsageOIDs
Specifies the allowable OIDs that identifies a key-usage purpose.
You can specify more than one separating each with a comma.
Table 10-20 Key Constraint Configuration Parameters
Parameter Description
Type
Select which key type is allowed from DSA and RSA.
MinLength
Specifies the minimum allowable key length.
MaxLength
Specifies the maximum allowable key length.