No Constraint; Netscape Certificate Type Extension Constraint; Signing Algorithm Constraint; Subject Name Constraint - Red Hat CERTIFICATE SYSTEM 7.3 - ADMINISTRATION Administration Manual

13.8.6. No Constraint

This constraint implements no constraint. When chosen along with a default, there are not constraints
placed on that default.

13.8.7. Netscape Certificate Type Extension Constraint

WARNING
This constraint is obsolete. Instead of using the Netscape Certificate Type extension
constraint, use the Key Usage extension or Extended Key Usage extension.
The Netscape Certificate Type extension constraint checks if the Netscape Certificate Type extension
in the certificate request satisfies the criteria set in this constraint.

13.8.8. Signing Algorithm Constraint

The Signing Algorithm constraint checks if the signing algorithm in the certificate request satisfies the
criteria set in this constraint.
Parameter
signingAlgsAllowed
Table 13.25. Signing Algorithms Constraint Configuration Parameters

13.8.9. Subject Name Constraint

The Subject Name constraint checks if the subject name in the certificate request satisfies the criteria.
Parameter
Pattern
Table 13.26. Subject Name Constraint Configuration Parameters
The Subject Name constraint supports all regular-expression constructs listed in
j2se/1.4.1/docs/api/java/util/regex/Pattern.html. This allows wildcards such as asterisks (*) to search
for any number of the characters and periods (.)to search for any type character.
For example, if the pattern of the subject name constraint is set to uid=.*, the certificate profile
framework checks if the subject name in the certificate request matches the pattern. A subject name
No Constraint
http://java.sun.com/
319