Policy Constraints Extension Default - Red Hat CERTIFICATE SYSTEM 7.2 - ADMINISTRATION Administration Manual

The following constraints can be defined with this default:
• Extension Constraint; see
Section 12.8.6, "No
• No Constraints; see
Parameter
critical
Table 12.13. OCSP No Check Extension Default Configuration Parameters

12.7.14. Policy Constraints Extension Default

This default attaches a Policy Constraints extension to the certificate. The extension, which can be
used in CA certificates only, constrains path validation in two ways: either to prohibit policy mapping
or to require that each certificate in a path contain an acceptable policy identifier. The default can
specify both, ReqExplicitPolicy and InhibitPolicyMapping. PKIX standard requires that, if
present in a CA certificate, the extension must never consist of a null sequence. At least one of the
two specified fields must be present.
For general information about this extension, see
The following constraints can be defined with this default:
• Extension Constraint; see
Section 12.8.6, "No
• No Constraints; see
Parameter
critical
reqExplicitPolicy
inhibitPolicyMapping
Section 12.8.3, "Extension
Constraint".
Section A.3.11,
Section 12.8.3, "Extension
Constraint".
Policy Constraints Extension Default
Constraint".
"policyConstraints".
Constraint".
273