Red Hat CERTIFICATE 7.1 ADMINISTRATOR, Руководство администратора

Страница: 433 / 840

Defaults Reference
Chapter 11 Certificate Profiles 433
Name_<n>
Specifies the name of the CRL distribution point, the name can
be in any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For
example, the name would look similar to the subject name
in a certificate, like this:
CN=CA Central,
OU=Research Dept, O=Example Corporation,
C=US
• A URIName; for example, it would look similar to this:
http://testCA.example.com:80
• An
RDN
which specifies a location relative to the CRL
Issuer. In this case, the value of the
Type
attribute must be
RelativeToIssuer
.
Reasons_<n>
Specifies revocation reasons covered by the CRL maintained at
the distribution point. Provide a comma-separated list of the
following constants:
• unused
• keyCompromise
• cACompromise
• affiliationChanged
• superseded
• cessationOfOperation
•
certificateHold
IssuerName_<n>
Specifies the name of the issuer that has signed the CRL
maintained at the distribution point, the name can be in any of
the following formats:
• An X.500 directory name in the RFC 2253 syntax. For
example:
CN=CA Central, OU=Research Dept,
O=Example Corporation, C=US
• A URIName; for example, it would look similar to this:
http://testCA.example.com:80
Table 11-3 CRL Distribution Points Extension Configuration Parameters (Continued)
Parameter Description