Red Hat CERTIFICATE SYSTEM 7.2 - MIGRATION GUIDE, Руководство администратора

Страница: 286 / 512

Chapter 12. Certificate Profiles
266
Parameter Description
lib/rhpki-ca/othername.txt
.
KerberosName
has the
format
Realm|NameType|NameStrings
, such as
realm1|0|
userID1,userID2
.
The name value must comply with the format specified in
PointType_
.
PointType_
n
Specifies the general name type of the CRL issuer that signed
the CRL. The permissible values are as follows:
• RFC822Name
• DirectoryName
• DNSName
• EDIPartyName
• URIName
• IPAddress
• OIDName
• OtherName
The value for this parameter must correspond to the value in
the
PointIssuerName
field.
Table 12.8. Freshest CRL Extension Default Configuration Parameters
12.7.7. Issuer Alternative Name Extension Default
This default attaches the Issuer Alternative Name extension to the certificate. The Issuer Alternative
Name extension is used to associate Internet-style identities with the certificate issuer.
The following constraints can be defined with this default:
• Extension Constraint; see
Section 12.8.3, “Extension Constraint”
.
• No Constraints; see
Section 12.8.6, “No Constraint”
.
This default defines five locations with parameters for each location. The parameters are marked with
an
n
in the table to show with which location the parameter is associated.
Parameter Description
Critical Select
true
to mark this extension critical; select
false
to
mark the extension noncritical.
issuerAltExtType This sets the type of name extension to be used, which can be
one of the following:
• RFC822Name
• DirectoryName
• DNSName