Red Hat CERTIFICATE SYSTEM 8.0 - ADMINISTRATION, Руководство администратора

Страница: 242 / 564

Chapter 8. Publishing Certificates and CRLs
220
Figure 8.13. Rule Editor Window
•
type
. This is the type of certificate for which the rule applies. For a CA signing certificate, the
value is
cacert
. For a cross-signed certificate, the value is
xcert
. For all other types of
certificates, the value is
certs
. For CRLs, specify
crl
.
•
predicate
. This sets the predicate value for the type of certificate or CRL issuing point to which
this rule applies. The predicate values for CRL issuing points, delta CRLs, and certificates are
listed in
Table 8.3, “Predicate Expressions”
.
•
enable
.
•
mapper
. Mappers are not necessary when publishing to a file; they are only needed for LDAP
publishing. If this rule is associated with a publisher that publishes to an LDAP directory, select
an appropriate mapper here. Leave blank for all other forms of publishing.
•
publisher
. Sets the publisher to associate with the rule.
Table 8.3, “Predicate Expressions”
lists the predicates that can be used to identify CRL issuing points
and delta CRLs and certificate profiles.
Predicate Type Predicate
CRL Issuing Point
issuingPointId==
Issuing_Point_Instance_ID
&& isDeltaCRl==[true|false]
To publish only the master CRL, set
isDeltaCRl==false
. To publish only the delta CRL, set
isDeltaCRl==true
. To publish
both, set a rule for the master CRL and another rule for the delta CRL.
Certificate Profile
profileId==
profile_name