Netscape Certificate Management System 6.2, Руководство администратора

Страница: 448 / 874

Defaults Reference
448 Netscape Certificate Management System Administrator’s Guide • June 2003
Authority Key Identifier Extension Default
This default populates the Authority Key Identifier extension into the certificate
request. The extension is used to identify the public key that corresponds to the
private key used by a CA to sign certificates.
For general information about this extension, see “authorityKeyIdentifier” on
page 758.
This default has not parameters. If used, this extension will be included in the
certificate with the public key information.
Basic Constraints Extension Default
This default populates Basic Constraint extension in the certificate request. The
extension identifies whether or not the Certificate Manager is a CA. The extension
is also used during the certificate chain verification process to identify CA
certificates and to apply certificate chain-path length constraints.
For general information about this extension, see “basicConstraints” on page 759.
You can define the following constraints with this default:
• Basic Constraints Extension Constraint, see “Basics Constraints Extension
Constraint,” on page 471
• Extension Constraint, see “Extension Constraint,” on page 473
• No Constraints, see “No Constraint,” on page 475.
• If you selected
URI
, the value must be a non-relative
universal resource identifier (URI) following the URL
syntax and encoding rules. That is, the name must include
both a scheme (for example,
http
) and a fully qualified
domain name or IP address of the host. For example,
http://ocspResponder.example.com:8000
Enable_<n>
Specifies whether or not this location is enabled. Select true to
enable, select false to disable.
Table 10-1 Authority Info Access Extension Default Configuration Parameters
Parameter Description