Red Hat CERTIFICATE SYSTEM 7.1 - ADMINISTRATOR Administrator's Manual page 529

Table 12-32 HTTP input variables for
HTTP input variable
object_signing
ssl_ca
email_ca
object_signing_ca
During installation, CS automatically creates an instance of the Netscape certificate type
extension policy for the various types of certificates that you may want the server to issue,
named
Additionally, the default enrollment forms—the directory-based, directory- and PIN-based,
manual, and Kerberos server-based enrollment forms—for various types of certificates also
include the appropriate HTTP input variables corresponding to Netscape certificate type
extension bits. For details about these forms.
Note that the default enrollment forms embed variables that are considered appropriate for
the type of certificate, such as client, server, or CA, that can be requested using the form.
For example, the server enrollment form embeds the
subordinate CA (Certificate Manager) enrollment form embeds the
email_ca
In general, the forms are set up so that you don't have to make any modifications. However,
if there is a need to modify the bit settings, be sure to add or remove the corresponding
variable. Also, when adding a new variable, make sure that the HTML input format is as
follows:
<input type="HIDDEN" value="true" name="variable_name">
where
Table 12-33 NSCertTypeExt Configuration Parameters
Parameter Description
Specifies whether the rule is enabled or disabled. Select to enable, deselect to disable (default).
enable
Specifies the predicate expression for this rule. If you want this rule to be applied to all
predicate
certificate requests, leave the field blank (default). To form a predicate expression, see"Using
Predicates in Policy Rules," on page 465.
, that is enabled by default.
NSCertTypeExt
, and
ssl_ca object_signing_ca
can be any of the variables listed in Table 12-32.
variable_name
Extension-Specific Policy Module Reference
Netscape certificate
type extension bits (Continued)
Netscape certificate type extension bit
Object Signing (bit 3)
Reserved for future use (bit 4)
SSL CA (bit 5)
S/MIME CA (bit 6)
Object Signing CA (bit 7)
ssl_server
variables.
variable, whereas the
,
ssl_client
Chapter 12 Policies 529