Netscape Certificate Management System 6.2, Руководство администратора

Страница: 546 / 874

Extension-Specific Policy Module Reference
546 Netscape Certificate Management System Administrator’s Guide • June 2003
NSCCommentExt
The
NSCCommentExt
plug-in module enables you to add the Netscape Certificate
Comment Extension to certificates. The extension can be used to include textual
comments in certificates. Applications that are capable of interpreting the comment
may display it to a relying party when the certificate is used or viewed.
For general information about this extension, see “netscape-comment” on
page 776.
During installation, CMS automatically creates an instance of the Netscape
certificate comment extension policy, named
NSCCommentExt
, that is disabled by
default.
Table 11-30 NSCCommentExt Configuration Parameters
Parameter Description
enable
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable
(default).
predicate
Specifies the predicate expression for this rule. If you want this rule to be applied to
all certificate requests, leave the field blank (default). To form a predicate expression,
see section “Using Predicates in Policy Rules” in Chapter 18, “Setting Up Policies” of
CMS Administrator’s Guide.
Example:
HTTP_PARAMS.certType==client
critical
Specifies whether the extension should be marked critical or noncritical. Select to
mark critical, deselect to mark noncritical (default).
inputType
Specifies whether to embed a textual statement or to include a pointer to file that
contains the textual statement in certificates. The extension value is interpreted
according to the value specified for this parameter.
You should consider putting the textual statement in a file because certain
applications may not have the capability to display the text embedded in certificates.
Also, embedding a textual statement in a certificate increases its size. If you’re using
smart cards for generating and storing certificates, you may not want to embed
textual statements in certificates because on a smart card the memory for a certificate
may be limited.
Permissible values:
Text
or
File
.
•
Text
specifies that the textual statement—the value of the
displayText
field—
should be inserted in the extension (default).
•
File
specifies that the path to the file that contains the textual statement—the
value of the
commentfile
field—should be inserted in the extension.