Netscape Certificate Management System 6.1, Руководство администратора

Страница: 607 / 840

Setting Up the Issuance of CRLs
Chapter 14 Revocation and CRLs 607
5.
If you selected Allow extensions for this issuing point, you need to configure
the extensions for this issuing point. See “Setting CRL Extensions,” on page 607
for details.
Setting CRL Extensions
Complete this step only if you configured the Certificate Manager to create version
2 CRLs in the previous step—that is, if you selected the “Allow extensions” option
in when you configured CRLs for each issuing point.
During installation, the Certificate Manager creates default CRL extension rules.
Note that the server is configured to add the CRL Reason extension only; all the
other rules are in the disabled state. In this step, you modify the default rules to suit
your organization’s requirements.
To specify the CRL extensions:
1.
In the navigation tree, select Certificate Manager, and then select CRL Issuing
Points. Next, select the issuing point in which you want to set extensions and
click the plus sign. Next select the CRL Extension entry below the issuing
point.
The right pane shows the CRL Extensions Management tab, which lists
configured extensions.
2.
To modify a rule, select it and then click Edit/View.
3.
Change the information as appropriate.
Be sure to supply all the required values. See “CRL Extension Reference,” on
page 608 for complete information about each extension and the parameters for
those extensions.
4.
Click OK.
You are returned to the CRL Extensions Management tab.
5.
To modify other rules, repeat steps 2 through 4.
6.
Click Refresh to see the updated status of all the rules.