Netscape Certificate Management System 6.1, Руководство администратора

Страница: 650 / 840

Rules
650 Netscape Certificate Management System Administrator’s Guide • February 2003
Table 15-12 lists the predicates that can be used to identify CRL issuing points and
delta CRLs.
Rule Instance Reference
This section discusses the rule instances that have been set up.
LdapCaCertRule
The
LdapCaCertRule
can be used to publish CA certificates to an LDAP directory.
Table 15-12
CRL Predicate Expressions
Predicate Type Predicate
CRL Issuing
Point
issuingPointId=
Issuing_Point_Instance_ID
&& isDeltaCRL=[true|false]
To publish only the master CRL, set
isDeltaCRL=false
in order to publish only the
master CRL. For example:
issuingPointId=MasterCRL && isDeltaCRL=false
To publish only the delta CRL, set isDeltaCRL=true in order to
publish only the delta CRL. For example:
issuingPointId=MasterCRL && isDeltaCRL=true
To publish both, you must set a rule for the master CRL and another rule for the delta CRL.
Table 15-13 LdapCaCert Rule Configuration Parameters
Parameter Value Description
type cacert Specifies the type of certificate
that will be published. Select
from the pull down menu.
predicate Specifies a predicate for this
publisher.
enable yes Select to enable.
mapper LdapCaCertMap Specifies the mapper used with
this rule.
See “LdapCaCertMap,” on page
639 for details on this mapper.