Nsccommentext - Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual

Extension-Specific Policy Module Reference

NSCCommentExt

The
NSCCommentExt
Comment Extension to certificates. The extension can be used to include textual comments
in certificates. Applications that are capable of interpreting the comment may display it to a
relying party when the certificate is used or viewed.
For general information about this extension, see "netscape-comment" on page 749.
During installation, CS automatically creates an instance of the Netscape certificate
comment extension policy, named
Table 12-30 NSCCommentExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable (default).
enable
Specifies the predicate expression for this rule. If you want this rule to be applied to all
predicate
certificate requests, leave the field blank (default). To form a predicate expression, see section
"Using Predicates in Policy Rules" in Chapter 18, "Setting Up Policies" of CS
Administrator's Guide.
Example: HTTP_PARAMS.certType==client
Specifies whether the extension should be marked critical or noncritical. Select to mark
critical
critical, deselect to mark noncritical (default).
Specifies whether to embed a textual statement or to include a pointer to file that contains the
inputType
textual statement in certificates. The extension value is interpreted according to the value
specified for this parameter.
You should consider putting the textual statement in a file because certain applications may
not have the capability to display the text embedded in certificates. Also, embedding a textual
statement in a certificate increases its size. If you're using smart cards for generating and
storing certificates, you may not want to embed textual statements in certificates because on a
smart card the memory for a certificate may be limited.
Permissible values: Text or File.
•
•
526 Red Hat Certificate System Administrator's Guide • September 2005
plug-in module enables you to add the Netscape Certificate
Text specifies that the textual statement—the value of the displayText field—
should be inserted in the extension (default).
File specifies that the path to the file that contains the textual statement—the value of the
commentfile field—should be inserted in the extension.
, that is disabled by default.
NSCCommentExt