Netscape Certificate Management System 6.1, Руководство администратора

Страница: 521 / 840

Extension-Specific Policy Module Reference
Chapter 11 Policies 521
numEntries
Specifies the total number of sites to be contained or allowed in the extension.
This can be set to
0
specifying that no sites can be contained in the extension or
to
n
specifies the total number of sites to be included in the extension; it must be
an integer greater than zero. The default is
3
.
Note that when you set the value of this parameter, each site has its own set of
configuration parameters and you must specify appropriate values for each of
those parameters; otherwise the policy rule will return an error. Each set of
configuration parameters is distinguished by
<n>
, which is an integer derived
from the value you assign in this field. For example, if you set the
numEntries
parameter to 2,
<n>
would be
0
and
1
.
entry<n>_name_type
Specifies the general-name type for the site that you want to include in the
extension. Select from one of the following:
• Select
rfc822Name
if the site is an Internet mail address.
• Select
directoryName
if the site is an X.500 directory name.
• Select
dNSName
if the site is a DNS name (default).
• Select
ediPartyName
if the site is a EDI party name.
• Select
URL
if the site is a uniform resource identifier.
• Select
iPAddress
if the site is an IP address.
• Select
OID
if the site is an object identifier.
• Select
otherName
if the site is in any other name form.
entry<n>_name
Specifies the general-name value for the site you want to include in the
extension. Specify as follows:
• If you selected
rfc822Name
, the value must be a valid Internet mail address
in the
local-part@domain
format. You may use upper and lower case
letters in the mail address; no significance is attached to the case. For
example,
webSite@example.com
.
• If you selected
directoryName
, the value must be a string form of X.500
name. For example:
CN=corpDirectory, OU=IS, O=example.com,
C=US
.
• If you selected
dNSName
, the value must be a valid domain name. You may
use upper and lower case letters in the domain name; no significance is
attached to the case. Do not use the string “ ” for the DNS name. Also don’t
use the DNS representation for Internet mail addresses; such identities
should be encoded as
rfc822Name
. For example,
webSite.example.com
.
Table 11-20 CertificateScopeOfUseExt Configuration Parameters (Continued)
Parameter Description