Netscape Certificate Management System 6.1, Руководство администратора

Страница: 615 / 840

CRL Extension Reference
Chapter 14 Revocation and CRLs 615
Table 14-9 IssuingDistributionPoint Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to
enable, deselect to disable (default).
critical
Select you want the server to mark the extension critical
(default); deselect if you want the server to mark the
extension noncritical.
pointType
Specifies the type of the issuing distribution point from
the following
•
DirectoryName
specifies that the type is an X.500
Directory Name.
•
URI
specifies that the type is a uniform resource
indicator.
pointName
Specifies the name of the issuing distribution point. The
name of the distribution point depends on the value
specified for the
pointType
parameter.
• If the
pointType
attribute is set to
DirectoryName
,
the name must be an X.500 Name. For example:
CN=CRLCentral,OU=Research Dept,O=Example
Corporation,C=US
• If the
pointType
attribute is set to
URI
, the name
must be a URI; the URI must be an absolute pathname
and must specify the host. For example:
http://testCA.example.com/get/your/crls/
here/
(Note that the CRL may be stored in the directory
entry corresponding to the CRL issuing point, which
may be different than the directory entry of the CA.)
onlySomeReasons
Specifies the reason codes associated with the distribution
point.
Permissible values: A combination of reason
codes—
unspecified
,
keyCompromise
,
cACompromise
,
affiliationChanged
,
superseded
,
cessationOfOperation
,
certificateHold
, and
removeFromCRL
—separated by commas. Leave field
blank if the distribution point contains revoked certificates
with all reason codes or if you don’t want to set this field
(default).