Freshest Crl Extension Default - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Defaults Reference

Freshest CRL Extension Default

This default populates the Freshest CRL extension in the certificate request. The
CRL Extension Default
FreshestCRL Extension in certificate.
You can define the following constraints with this default:
• Extension Constraint, see "Extension Constraint," on page 454.
• No Constraints, see "No Constraint," on page 456.
This default allows you to define 5 locations and specify parameters for each location. The
parameters are marked with an
associated with one of the five possible locations.
Table 11-6
Parameter
Critical
PointEnable_<n>
PointType_<n>
PointName_<n>
PointIssuer
Name_<n>
436 Red Hat Certificate System Administrator's Guide • September 2005
enables you to configure a Certificate Manager to set the
in the table to distinguish that the parameter is
<n>
Freshest CRL Extension Default Configuration Parameters
Description
Select true to mark this extension critical; select false to mark the
extension noncritical.
Select true to enable this point; select false to disable this point.
Specifies the type of issuing point. Select from DirectoryName and
URIName.
• If pointType is set to directoryName, the value must be a
string form of X.500 name, similar to the subject name in a
certificate. For example, CN=CACentral,OU=Research
Dept,O=Example Corporation,C=US.
• If pointType is set to URI, the name must be a URIName; the
URIName must be an absolute pathname and must specify the host.
For example:
http://testCA.example.com/get/your/crls/here/
Specifies the name of the issuer that has signed the CRL maintained at
this distribution point, the name can be in any of the following formats:
• An X.500 directory name in the RFC 2253 syntax. For example:
CN=CA Central, OU=Research Dept, O=Example
Corporation, C=US
• A URIName; for example:
http://testCA.example.com:80
Freshest