Netscape MANAGEMENT SYSTEM 6.0 - CUSTOMIZATION Manual page 54

Enrollment Interface
Parameters Accepted by the Enrollment Interface (Continued)
Table 3-7
Parameter
certType
challengePassword
CRMFRequest
importCAChain
importCert
importCertMimeType
pkcs10Request
54 Netscape Certificate Management System Customization Guide • March 2002
Format and Description
ca | CEP-Request | client | objSignClient | ra | server | other
Specifies the type of certificate requested by the entity. The default is client.
The certType is not associated with any certificate extensions. It may be used
by policy modules to make decisions, and it may be used by a CMS server to
determine how to decode the request or format the response.
string
An optional challenge phrase or password that can be used later by the entity
to revoke the certificate. This parameter is optional. If you use this, entities can
use the "Challenge Revocation Interface" (/challenge_revocation1,
page 42)with this challenge password to revoke a certificate without manual
intervention and without SSL client authentication.
base-64 encoded data
If requestFormat = crmf, this parameter should be used to send the
base-64 encoded CRMF request.
true | false
Used only when importCert = true. The default, if this parameter is not
explicitly passed, is true. If set to true, a successful certificate request will
return a PKCS #7 formatted certificate chain; if set to false, a single,
DER-encoded certificate will be returned. The certificate chain includes the
issued certificate and the CA (issuer) certificate.
true | false
If true, and the certificate request is not deferred or rejected, the CMS server's
response will be binary data with the MIME type determined by the
importCertMimeType parameter. The data returned will be either a
certificate or a certificate chain, based on the value of importCAChain.
MIME Type string
Sets the MIME type the CMS server uses when a certificate is returned to the
requestor. The default is application/x-x509-user-cert. The MIME
type should be in the standard MIME type format of <type>/<subtype>.
base-64 encoded data
If requestFormat = pkcs10, this parameter should be used to send the
base-64 encoded certificate request.