Testing Policy Configuration; Using Javascript For Policies - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Using JavaScript for Policies

In the Policy Rules Management tab, click Reorder.
1.
The Reorder Policy Rules window appears. It lists configured policy rules in the order
in which they are executed by the subsystem.
To change the order of a rule, select it in the list and click the Up or Down button, as
2.
appropriate.
Keep in mind that the server executes the rules on a first-come-first-served basis,
overwriting the configuration determined by the previous rule, if any.
When you have the correct order, click OK.
3.
You are returned to the Policy Rules Management tab.
To view the updated configuration, click Refresh.
4.

Testing Policy Configuration

To make sure that you've configured the server correctly, request a certificate and check the
certificate for details such as for validity period, key type and size, and extensions.
Enroll for a Certificate
1.
Approve the Request
2.
Check the Certificate Details
3.
Verify that the certificate contains the required details. Be sure to check the Extension
section to see if it contains all the required extensions.
Using JavaScript for Policies
CS includes a facility for complex scripting of the policy plug-in instances via JavaScript
Using the JavaScript policy processor allows you to:
• Determine the call sequence of existing Java plug-ins
• Use complex logic to determine whether to call a plug-in (versus the simpler
predicates)
• Write policies in JavaScript
• Develop extensions without needing to know Java or have the Java SDK
474 Red Hat Certificate System Administrator's Guide • September 2005
TM .