Table of Contents
Advertisement
RenewalConstraints Plug-in Module
weeks of validity of the certificate. However, if the interval specified in the policy
rule is not sufficient for renewal to occur, some of your users may not be able to
renew their certificates prior to the expiration time and end up owning expired
certificates.
Note that the policy also allows you to specify how long after the expiration of a
certificate can it be renewed. If you don't specify this, the server will renew all
expired certificates that are submitted for renewal.
During installation, Certificate Management System automatically creates an
instance of the renewal constraints policy. See "RenewalConstraintsRule Rule" on
page 103.
Configuration Parameters of
RenewalConstraints
In the CMS configuration file, the
<subsystem>.Policy.impl.RenewalConstraints.class=
com.netscape.certsrv.policy.RenewalConstraints
or
ra
In the CMS window, the module is identified as
shows how the configurable parameters for the module are displayed in the CMS
window.
Figure 3-6
102
Netscape Certificate Management System Plug-ins Guide • October 2001
(prefix identifying the subsystem).
Parameters of the RenewalConstraints module
RenewalConstraints
RenewalConstraints
module is identified as
, where
<subsystem>
. Figure 3-6
is
ca
Advertisement
Table of Contents
