Netscape Certificate Management System 6.1, Руководство администратора

Страница: 533 / 840

Extension-Specific Policy Module Reference
Chapter 11 Policies 533
Permissible values:
rfc822Name
,
directoryName
,
dNSName
,
ediPartyName
,
URL
,
iPAddress
,
OID
, or
otherName
.
• Select
rfc822Name
if the alternative name is an Internet mail address
(default).
• Select
directoryName
if the alternative name is an X.500 directory
name.
• Select
dNSName
if the alternative name is a DNS name.
• Select
ediPartyName
if the alternative name is a EDI party name.
• Select
URL
if the alternative name is a uniform resource locator (URL).
• Select
iPAddress
if the alternative name is an IP address.
• Select
OID
if the alternative name is an object identifier.
• Select
otherName
if the alternative name is in any other name form.
Example:
rfc822Name
generalName<n>.general
NameValue
Specifies the general-name value for the alternative name you want to
include in the extension.
Permissible values: Depends on the general-name type you selected in the
generalName<n>.generalNameChoice
field.
• If you selected
rfc822Name
, the value must be a valid Internet mail
address in the
local-part@domain
format; see the definition of an
rfc822Name
as defined in RFC 822
(
http://www.ietf.org/rfc/rfc0822.txt
). You may use upper
and lower case letters in the mail address; no significance is attached to
the case. For example,
testCA@example.com
.
• If you selected
directoryName
, the value must be a string form of
X.500 name, similar to the subject name in a certificate, in the RFC 2253
syntax (see
http://www.ietf.org/rfc/rfc2253.txt
). Note that
RFC 2253 replaces RFC 1779. For example,
CN=CA
Corp,OU=Research Dept,O=Example Corporation, C=US
.
• If you selected
dNSName
, the value must be a valid domain name in the
preferred-name syntax as specified by RFC 1034
(
http://www.ietf.org/rfc/rfc1034.txt
). You may use upper
and lower case letters in the domain name; no significance is attached
to the case. Do not use the string “ ” for the DNS name. Also don’t use
the DNS representation for Internet mail addresses; such identities
should be encoded as
rfc822Name
. For example,
testCA.example.com
.
Table 11-25 IssuerAltNameExt Configuration Parameters (Continued)
Parameter Description